Stay Secure with the Latest Linux Advisories

security advisorymoderateFedora

Fedora 27: Rsyslog 8.37.0 Moderate: Journal Input Fix Update

rebase to 8.37.0 ---------------------- - few fixes and enhancements handling journal input - now requires librelp at least 1.2.16, adding support for setting address to bind - various other rsyslog core bugfixes and stability fixes. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-2818fc5308 2018-08-16 14:55:43.574501 --------------------------------------------------------------------------------Name : rsyslog Product : Fedora 27 Version : 8.37.0 Release : 1.fc27 URL : https://www.rsyslog.com/ Summary : Enhanced system logging and kernel message trapping daemon Description : Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up, with advanced features suitable for enterprise-class, encryption-protected syslog relay chains. --------------------------------------------------------------------------------Update Information: rebase to 8.37.0 ---------------------- - few fixes and enhancements handling journal input - now requires librelp at least 1.2.16, adding support for setting address to bind - various other rsyslog core bugfixes and stability fixes --------------------------------------------------------------------------------ChangeLog: * Wed Aug 8 2018 Jiri Vymazal - 8.37.0-1 - rebase to upstream version 8.37.0 resolves: rhbz#1612079 resolves: rhbz#1598217 resolves: rhbz#1544139 - dropped needless libee dependency - bumped librelp dependency to actually needed version * Wed Jul 25 2018 Jiri Vymazal - 8.36.0-3 - fixed a typo in commented-out part of default conf + reordered it resolves: rhbz#1579592 * Tue Jul 24 2018 Jason L Tibbitts III - 8.36.0-3 - Rebuild for unannounced net-snmp soversion bump. - Usepython3-docutils because rst2man has moved there. * Mon Jul 23 2018 Jiri Vymazal - 8.36.0-2 - added gcc to buildrequires following f29 system-wide change * Sat Jul 14 2018 Fedora Release Engineering - 8.36.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Jul 2 2018 Jiri Vymazal - 8.36.0-1 - rebase to 8.36.0 - removed stdlog dependency as upstream is going to drop it - following upstream naming of pidfile - removed needless conditionals * Fri Jun 8 2018 Remi Collet - 8.35.0-4 - rebuild with libbson and libmongc 1.10.2 (soname back to 0) * Mon May 28 2018 Remi Collet - 8.35.0-3 - rebuild with libbson and libmongc 1.10.0 * Thu May 17 2018 Radovan Sroka - 8.35.0-2 - rebase to 8.35.0 * Thu Apr 5 2018 Jiri Vymazal - 8.34.0-1 - rebase to 8.34.0 - added mmkubernetes module - added fmhttp module - finished converting rsyslog config to new syntax - dropped obsolete defattr statements from spec * Fri Feb 9 2018 Fedora Release Engineering - 8.32.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Jan 11 2018 Jiri Vymazal - 8.32.0-1 - rebase to 8.32.0 - now requires higher version of libfastjson * Thu Dec 14 2017 Radovan Sroka - 8.31.0-2 - added also cyrus-sasl-devel dependency * Thu Dec 14 2017 Radovan Sroka - 8.31.0-1 - update to 8.31.0 - removed upstreamed patches - added dependecies mongo-c-driver-devel snappy-devel - removed depricated dependecies libmongo-client - mongodb plugin now uses new driver with TLS,... * Tue Nov 28 2017 Jiri Vymazal - 8.30.0-4 - changed rsyslog-doc to noarch * Mon Nov 20 2017 Radovan Sroka - 8.30.0-4 - rebuild due to libqpid-proton.so * Wed Oct 25 2017 Radovan Sroka - 8.30.0-3 - rebuild * Wed Oct 25 2017 Radovan Sroka - 8.30.0-2 - imjournal didn't work at all - added imjournal patch for rhbz#1505853 * Mon Oct 23 2017 Radovan Sroka - 8.30.0-1 - rebase to 8.30.0 - added patch that resolves imgssapi compilation errors * Mon Oct 9 2017 Marek Tamaskovic -8.29.0-4 - mysql-devel changed for mariadb-connector-c-devel resolves: rhbz#1493695 - repaired changelog --------------------------------------------------------------------------------References: [ 1 ] Bug #1598217 - rsyslog: Buffer overflow in SanitizeMsg() function in runtime/parser.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1598217 [ 2 ] Bug #1544139 - rsyslogd: imjournal: open on state file `/var/lib/rsyslog/imjournal.state' failed [v8.32.0 try https://www.rsyslog.com/ ] https://bugzilla.redhat.com/show_bug.cgi?id=1544139 [ 3 ] Bug #1612079 - rsyslog-8.37.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1612079 [ 4 ] Bug #1579592 - SELinux is preventing in:imjournal from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1579592 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2018-2818fc5308' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./message/PGNY5YIWUMNC5U2HCH7SVG5TXHDW7ODE/ . Moderate update for rsyslog on Fedora 27 addressing journal inputhandling and stability.. rebase, ----------------------, fixes, enhancements, handling, journal, input. . LinuxSecurity.com Team

Aug 16, 2018 Fedora