tocsin

Debian/corosync: high 8.2

A flaw was found in Corosync. A remote unauthenticated attacker can exploit a wrong return value vulnerability in the Corosync membership commit token sanity check by sending a specially crafted User

Action: Upgrade corosync to 3.1.7-1+deb12u2 or later.

Affected

introducedfixedlast affected
03.1.7-1+deb12u2-

Fixed versions

3.1.7-1+deb12u2

Sources

published · modified · JSON