Skip to content
OpenAdvisories
Critical ELSA-2018-1223 1 CVE

Critical: librelp security update (Oracle Linux 7)

Published Apr 24, 2018 · Updated Apr 24, 2018

Summary

[1.2.12-1.1]
- fixed bad NVR
- resolves rhbz#1561232

[1.2.12-2]
- fixed CVE-2018-1000140
- resolves rhbz#1561232

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 7 librelp 0:1.2.12-1.el7_5.1
Oracle Linux · 7 librelp-devel 0:1.2.12-1.el7_5.1

Vulnerabilities 1

  • Unscored —
    CVE-2018-1000140 Public exploit

    rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificate…