Skip to content
OpenAdvisories
Unscored RHSA-2018:1703 1 CVE

Red Hat Security Advisory: librelp security update

Published Sep 16, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 9

ReleasePackageFixed in
Red Hat · RHEL 7.2 AUS rhel_aus:7.2::server librelp 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 AUS rhel_aus:7.2::server librelp-debuginfo 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 AUS rhel_aus:7.2::server librelp-devel 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 E4S rhel_e4s:7.2::server librelp 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 E4S rhel_e4s:7.2::server librelp-debuginfo 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 E4S rhel_e4s:7.2::server librelp-devel 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 TUS rhel_tus:7.2::server librelp 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 TUS rhel_tus:7.2::server librelp-debuginfo 0:1.2.0-4.el7_2
Red Hat · RHEL 7.2 TUS rhel_tus:7.2::server librelp-devel 0:1.2.0-4.el7_2

Vulnerabilities 1

  • Unscored —
    CVE-2018-1000140 Public exploit

    rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificate…

    librelp librelp Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1560084
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2018/rhsa-2018_1703.json
  • report
    https://access.redhat.com/security/cve/CVE-2018-1000140
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2018-1000140
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2018-1000140
  • article
    https://www.rsyslog.com/cve-2018-1000140/