Summary
[8.2510.0-5.1]
- Backport: guard regex-framing match against iCurrLine == 0 to fix crash
Resolves: RHEL-212700
Fixed packages 20
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 10 | rsyslog | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-crypto | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-doc | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-elasticsearch | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-gnutls | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-gssapi | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-kafka | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmaudit | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmfields | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmjsonparse | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmkubernetes | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmnormalize | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mmsnmptrapd | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-mysql | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-omamqp1 | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-openssl | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-pgsql | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-relp | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-snmp | 0:8.2510.0-5.el10_2.1 |
| Oracle Linux · 10 | rsyslog-udpspoof | 0:8.2510.0-5.el10_2.1 |
Vulnerabilities 1
-
High 7.5
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity …