Fedora 38 Update Advisory: Netconsole Daemon Critical Buffer Overrun
fedora
September 7, 2023
Update to prevent invalid fragment values from leading to a buffer overrun
Summary
This is a daemon for receiving and processing logs from the Linux Kernel, as
emitted over a network by the kernel's netconsole module. It supports both the
old "legacy" text-only format, and the new extended format added in v4.4.
The core of the daemon does nothing but process messages and drop them: in order
to make the daemon useful, the user must supply one or more "output modules".
These modules are shared object files which expose a small ABI that is called by
netconsd with the content and metadata for netconsole messages it receives.
Update Information:
Update to prevent invalid fragment values from leading to a buffer overrun
Topics Covered
Change Log
* Wed Sep 6 2023 Michel Lind
References
Fedora Update Notification
FEDORA-2023-2c9ef9e004
2023-09-07 01:27:49.830091
Name : netconsd
Product : Fedora 38
Version : 0.3
Release : 1.fc38
URL :
Summary : The Netconsole Daemon
Description :
This is a daemon for receiving and processing logs from the Linux Kernel, as
emitted over a network by the kernel's netconsole module. It supports both the
old "legacy" text-only format, and the new extended format added in v4.4.
The core of the daemon does nothing but process messages and drop them: in order
to make the daemon useful, the user must supply one or more "output modules".
These modules are shared object files which expose a small ABI that is called by
netconsd with the content and metadata for netconsole messages it receives.
Update Instructions
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-2c9ef9e004' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Name: netconsd
Product: Fedora 38
Version: 0.3
Release: 1.fc38
URL:
Summary: The Netconsole Daemon
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!