Summary
This update for rsyslog fixes the following issues:
Security issues fixed:
- CVE-2019-17041: Fixed a heap overflow in the parser for AIX log messages (bsc#1153451).
- CVE-2019-17042: Fixed a heap overflow in the parser for Cisco log messages (bsc#1153459).
Non-security issue fixed:
- imudp: fix segfault in ratelimit code (bsc#1149094)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 12 SP4 Linux Enterprise Desktop 12 SP4 | rsyslog | 8.24.0-3.33.2 |
| SUSE · SLES 12 SP4 Linux Enterprise Server 12 SP4 | rsyslog | 8.24.0-3.33.2 |
| SUSE · SLES 12 SP5 Linux Enterprise Server 12 SP5 | rsyslog | 8.24.0-3.33.2 |
| SUSE · SLES for SAP 12 SP4 Linux Enterprise Server for SAP Applications 12 SP4 | rsyslog | 8.24.0-3.33.2 |
| SUSE · SLES for SAP 12 SP5 Linux Enterprise Server for SAP Applications 12 SP5 | rsyslog | 8.24.0-3.33.2 |
Vulnerabilities 2
-
Unscored —CVE-2019-17041 Public exploit
An issue was discovered in Rsyslog v8.1908.0. contrib/pmaixforwardedfrom/pmaixforwardedfrom.c has a heap overflow in th…
-
Unscored —
An issue was discovered in Rsyslog v8.1908.0. contrib/pmcisconames/pmcisconames.c has a heap overflow in the parser for…