Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 524
Alerts This Week
Warning Icon 1 524

SUSE Linux Enterprise 15: 2018:1937-1 Moderate: Rsyslog Access Control

suse
Calendar Grey July 12, 2018
Scroller Suse
SUSE Security Update for rsyslog: Resolution for CVE-2015-3242, tackles the issue of log file access permissions in impacted software.
An update that fixes one vulnerability is now available

Summary

This update for rsyslog fixes the following security issue: - CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Server Applications 15: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-2018-1318=1 - SUSE Linux Enterprise Module for Basesystem 15: zypper in -t patch SUSE-SLE-Module-Basesystem-15-2018-1318=1 Package List: - SUSE Linux Enterprise Module for Server Applications 15 (aarch64 ppc64le s390x): rsyslog-debuginfo-8.33.1-3.3.1

Topics%20covered

Topics Covered

security advisory moderate access control SUSE Linux rsyslog

References

#935393

Cross- CVE-2015-3243

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15

SUSE Linux Enterprise Module for Basesystem 15

https://www.suse.com/security/cve/CVE-2015-3243.html

https://bugzilla.suse.com/935393

Announcement ID: SUSE-SU-2018:1937-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate access control SUSE Linux rsyslog

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.