Skip to content
OpenAdvisories
Medium ELSA-2020-1000 2 CVEs

Moderate: rsyslog security, bug fix, and enhancement update (Oracle Linux 7)

Published Apr 6, 2020 · Updated Apr 6, 2020

Summary

[8.24.0-52]
RHEL 7.8 ERRATUM
- edited patch file ID for imfile to not log useless errors
also improved file-id behavior to adress newly found problems
resolves: rhbz#1763746

[8.24.0-49]
RHEL 7.8 ERRATUM
- fixed fsync patch to actually revognize the new option
resolves: rhbz#1696686 (failedQA)

[8.24.0-48]
RHEL 7.8 ERRATUM
- added patch resolving crash on wrong MsgProperty
resolves: rhbz#1549706
- added patch resolving CVE in pmaixforward module
resolves: rhbz#1768320
- added patch resolving CVE in pmcisconames module
resolves: rhbz#1768323
- added patch implementing file ID for imfile
resolves: rhbz#1763746
- added patch fixing omelasticsearch with ES 6.X
resolves: rhbz#1600171

[8.24.0-47]
RHEL 7.8 ERRATUM
- edited imfile truncation detection patch with reression fix
resolves: rhbz#1744856

[8.24.0-46]
RHEL 7.8 ERRATUM
- Support Intermediate Certificate Chains in rsyslog
resolves: rhbz#1627799
- fixed WorAroundJournalBug patch to not cause leaks
resolves: rhbz#1744617
- added patch fixing possible segfault in rate-limiter
resolves: rhbz#1744682

[8.24.0-45]
RHEL 7.8 ERRATUM
- fixed fsync patch according to covscan results
resolves: rhbz#1696686

[8.24.0-44]
RHEL 7.8 ERRATUM
- added patch and doc-patch for new caseSensitive imUDP/TCP option
resolves: rhbz#1309698

Fixed packages 18

ReleasePackageFixed in
Oracle Linux · 7 rsyslog 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-crypto 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-doc 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-elasticsearch 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-gnutls 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-gssapi 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-kafka 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-libdbi 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mmaudit 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mmjsonparse 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mmkubernetes 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mmnormalize 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mmsnmptrapd 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-mysql 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-pgsql 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-relp 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-snmp 0:8.24.0-52.el7
Oracle Linux · 7 rsyslog-udpspoof 0:8.24.0-52.el7

Vulnerabilities 2