rpm package
opensuse/csync2&distro=openSUSE Tumbleweed
pkg:rpm/opensuse/csync2&distro=openSUSE%20Tumbleweed
Vulnerabilities (3)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-41051 | Med | 5.0 | < 2.0+git.1600444747.83b3644-3.1 | 2.0+git.1600444747.83b3644-3.1 | May 13, 2026 | csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories. | |
| CVE-2019-15523 | — | < 2.0+git.1600444747.83b3644-1.3 | 2.0+git.1600444747.83b3644-1.3 | Dec 30, 2020 | An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API. | ||
| CVE-2019-15522 | — | < 2.0+git.1600444747.83b3644-1.3 | 2.0+git.1600444747.83b3644-1.3 | Mar 20, 2020 | An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL. |
- affected < 2.0+git.1600444747.83b3644-3.1fixed 2.0+git.1600444747.83b3644-3.1
csync2 uses insecure temporary directories when compiled with C99 or later, allowing for TOCTOU style attacks on the temporary directories.
- CVE-2019-15523Dec 30, 2020affected < 2.0+git.1600444747.83b3644-1.3fixed 2.0+git.1600444747.83b3644-1.3
An issue was discovered in LINBIT csync2 through 2.0. It does not correctly check for the return value GNUTLS_E_WARNING_ALERT_RECEIVED of the gnutls_handshake() function. It neglects to call this function again, as required by the design of the API.
- CVE-2019-15522Mar 20, 2020affected < 2.0+git.1600444747.83b3644-1.3fixed 2.0+git.1600444747.83b3644-1.3
An issue was discovered in LINBIT csync2 through 2.0. csync_daemon_session in daemon.c neglects to force a failure of a hello command when the configuration requires use of SSL.