Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
89
security advisorymoderateFedoraFedora 38: FEDORA-2023-6b4d3ca766 Moderate Netconsole Daemon Update
Update to 0.4. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-6b4d3ca766 2023-11-04 03:41:29.345912 -------------------------------------------------------------------------------- Name : netconsd Product : Fedora 38 Version : 0.4 Release : 1.fc38 URL : Summary : The Netconsole Daemon Description : This is a daemon for receiving and processing logs from the Linux Kernel, as emitted over a network by the kernel's netconsole module. It supports both the old "legacy" text-only format, and the new extended format added in v4.4. The core of the daemon does nothing but process messages and drop them: in order to make the daemon useful, the user must supply one or more "output modules". These modules are shared object files which expose a small ABI that is called by netconsd with the content and metadata for netconsole messages it receives. -------------------------------------------------------------------------------- Update Information: Update to 0.4 -------------------------------------------------------------------------------- ChangeLog: * Wed Oct 25 2023 Davide Cavalca - 0.4-1 - Update to 0.4 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-6b4d3ca766' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Nov 04, 2023
Fedora
89
security advisoryFedorabuffer overrunFedora 39: 2023-9adf4a31cc Critical: Netconsole Buffer Overrun Fix
Update to prevent invalid fragment values from leading to a buffer overrun. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-9adf4a31cc 2023-09-07 22:59:29.614770 -------------------------------------------------------------------------------- Name : netconsd Product : Fedora 39 Version : 0.3 Release : 1.fc39 URL : Summary : The Netconsole Daemon Description : This is a daemon for receiving and processing logs from the Linux Kernel, as emitted over a network by the kernel's netconsole module. It supports both the old "legacy" text-only format, and the new extended format added in v4.4. The core of the daemon does nothing but process messages and drop them: in order to make the daemon useful, the user must supply one or more "output modules". These modules are shared object files which expose a small ABI that is called by netconsd with the content and metadata for netconsole messages it receives. -------------------------------------------------------------------------------- Update Information: Update to prevent invalid fragment values from leading to a buffer overrun -------------------------------------------------------------------------------- ChangeLog: * Wed Sep 6 2023 Michel Lind - 0.3-1 - Update to 0.3 - Prevent invalid fragment values from leading to a buffer overrun - Use SPDX license identifier -------------------------------------------------------------------------------- References: [ 1 ] Bug #2237785 - netconsd prior to v0.3 susceptible to buffer overrun when processing invalid fragment values https://bugzilla.redhat.com/show_bug.cgi?id=2237785 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-9adf4a31cc' at the command line. For more information, refer to the dnf documentation availableat https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list --
Sep 07, 2023
•Critical
Fedora
98
security advisorysecurity updatebuffer overflowRed Hat 6: RHSA-2011:1247-01 Moderate: Rsyslog Buffer Overflow Issue
Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: rsyslog security update Advisory ID: RHSA-2011:1247-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2011:1247.html Issue date: 2011-09-01 CVE Names: CVE-2011-3200 ==================================================================== 1. Summary: Updated rsyslog packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: Red Hat Enterprise Linux Desktop (v. 6) - i386, x86_64 Red Hat Enterprise Linux Desktop Optional (v. 6) - i386, x86_64 Red Hat Enterprise Linux HPC Node (v. 6) - x86_64 Red Hat Enterprise Linux HPC Node Optional (v. 6) - x86_64 Red Hat Enterprise Linux Server (v. 6) - i386, ppc64, s390x, x86_64 Red Hat Enterprise Linux Workstation (v. 6) - i386, x86_64 3. Description: The rsyslog packages provide an enhanced, multi-threaded syslog daemon that supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grained output format control. A two byte buffer overflow flaw was found in the rsyslog daemon's parseLegacySyslogMsg function. An attacker able to submit log messages to rsyslogd could use this flaw to crash the daemon. (CVE-2011-3200) All rsyslog users should upgrade to these updated packages, which contain a backported patch to correct this issue. After installing this update, the rsyslog daemon will be restarted automatically. 4.Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259 5. Bugs fixed (http://bugzilla.redhat.com/): 727644 - CVE-2011-3200 rsyslog: parseLegacySyslogMsg off-by-two buffer overflow 6. Package List: Red Hat Enterprise Linux Desktop (v. 6): Source: i386: rsyslog-4.6.2-3.el6_1.2.i686.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.i686.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.i686.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.i686.rpm rsyslog-relp-4.6.2-3.el6_1.2.i686.rpm x86_64: rsyslog-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-relp-4.6.2-3.el6_1.2.x86_64.rpm Red Hat Enterprise Linux Desktop Optional (v. 6): Source: i386: rsyslog-debuginfo-4.6.2-3.el6_1.2.i686.rpm rsyslog-mysql-4.6.2-3.el6_1.2.i686.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.i686.rpm x86_64: rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-mysql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm Red Hat Enterprise Linux HPC Node (v. 6): Source: x86_64: rsyslog-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-relp-4.6.2-3.el6_1.2.x86_64.rpm Red Hat Enterprise Linux HPC Node Optional (v. 6): Source: x86_64: rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-mysql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm Red Hat Enterprise Linux Server (v.6): Source: i386: rsyslog-4.6.2-3.el6_1.2.i686.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.i686.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.i686.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.i686.rpm rsyslog-mysql-4.6.2-3.el6_1.2.i686.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.i686.rpm rsyslog-relp-4.6.2-3.el6_1.2.i686.rpm ppc64: rsyslog-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-mysql-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.ppc64.rpm rsyslog-relp-4.6.2-3.el6_1.2.ppc64.rpm s390x: rsyslog-4.6.2-3.el6_1.2.s390x.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.s390x.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.s390x.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.s390x.rpm rsyslog-mysql-4.6.2-3.el6_1.2.s390x.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.s390x.rpm rsyslog-relp-4.6.2-3.el6_1.2.s390x.rpm x86_64: rsyslog-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-mysql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-relp-4.6.2-3.el6_1.2.x86_64.rpm Red Hat Enterprise Linux Workstation (v. 6): Source: i386: rsyslog-4.6.2-3.el6_1.2.i686.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.i686.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.i686.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.i686.rpm rsyslog-mysql-4.6.2-3.el6_1.2.i686.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.i686.rpm rsyslog-relp-4.6.2-3.el6_1.2.i686.rpm x86_64: rsyslog-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-debuginfo-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gnutls-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-gssapi-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-mysql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-pgsql-4.6.2-3.el6_1.2.x86_64.rpm rsyslog-relp-4.6.2-3.el6_1.2.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7.References: https://access.redhat.com/security/cve/CVE-2011-3200 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2011 Red Hat, Inc. . Revised rsyslog modules for CentOS address security vulnerabilities classified by the cybersecurity department as moderate severity.. Rsyslog Update, Red Hat Advisory, Security Patches, Linux Daemon Fixes, Buffer Overflow Mitigation. . LinuxSecurity.com Team
Sep 01, 2011
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!