Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

Warning: Undefined array key "Description" in /var/www/www.linuxsecurity.com-443/html/lsadvisories/lsadvisories.php on line 220

Fedora 36 2022-7988dad217 Critical: Rsyslog Heap Overflow Fix

fedora
Calendar Grey May 16, 2022
Dist Fedora Esm H88
The recent Rsyslog update on Fedora 36 addresses a critical security vulnerability related to a possible heap buffer overflow. Essential information regarding the software upgrade is outlined.
Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8

Summary

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL,

syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part,

and fine grain output format control. It is compatible with stock sysklogd

and can be used as a drop-in replacement. Rsyslog is simple to set up, with

advanced features suitable for enterprise-class, encryption-protected syslog

relay chains.

Rebase to 8.2204.0 Add patch to resolve potential heap buffer overflow, details:

https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8

* Mon May 9 2022 Attila Lakatos - 8.2204.0-1

- rebase to 8.2204.0

resolves: rhbz#1951970

- CVE-2022-24903 rsyslog: Heap-based overflow in TCP syslog server

resolves: rhbz#2082302

su -c 'dnf upgrade --advisory FEDORA-2022-7988dad217' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 36
Version: 8.2204.0
Release: 1.fc36
Summary: Enhanced system logging and kernel message trapping daemon

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here