Skip to content
OpenAdvisories
Medium ELSA-2019-2110 1 CVE

Moderate: rsyslog security and bug fix update (Oracle Linux 7)

Published Aug 13, 2019 · Updated Aug 13, 2019

Summary

[8.24.0-38.0.2]
- Newer gcc complains about implicit declaration of prctl. Added header file to quiesce the compiler

[8.24.0-38]
RHEL 7.7 ERRATUM
- added patch increasing max path size preventing buffer overflow
with too long paths
resolves: rhbz#1656860

[8.24.0-37]
RHEL 7.7 ERRATUM
- edited patch fixing mmkubernetes halt after pod deletition
(covscan found an issue in previous version)
resolves: rhbz#1622767
- added patch stopping flooding logs with journald errors
resolves: rhbz#1632211
- added patch stopping flooding logs with symlink false-positives
resolves: rhbz#1685901
- added patch stopping memory leak when processing internal msgs
resolves: rhbz#1666365
- added documentation patch with info about CRI-O to mmkubernetes
resolves: rhbz#1625935

[8.24.0-36]
RHEL 7.7 ERRATUM
- added patch fixing mmkubernetes halt after pod deletition
resolves: rhbz#1622767

[8.24.0-35]
RHEL 7.7 ERRATUM
- added patch fixing memory corruption in omfwd module
resolves: rhbz#1632659
- added patch fixing imfile sopping monitor after rotation
resolves: rhbz#1649250
- added patch addressing imptcp CVE-2018-16881
resolves: rhbz#1658288

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 7 rsyslog 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-crypto 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-doc 0:8.24.0-38.el7
Oracle Linux · 7 rsyslog-elasticsearch 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-gnutls 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-gssapi 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-kafka 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-libdbi 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mmaudit 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mmjsonparse 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mmkubernetes 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mmnormalize 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mmsnmptrapd 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-mysql 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-pgsql 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-relp 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-snmp 0:8.24.0-38.0.2.el7
Oracle Linux · 7 rsyslog-udpspoof 0:8.24.0-38.0.2.el7

Vulnerabilities 1