Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×
Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Loading...
Explore Latest Linux Security advisories
We found 65 articles for you...
172
security advisorydenial of servicesecurity issueUbuntu 26.04 Rsyslog Critical Denial of Service Vuln USN-8598-1
Ubuntu Security Notice USN-8598-1 addresses vulnerabilities in rsyslog affecting multiple versions of Ubuntu, which could allow remote attackers to cause denial of service. Updates are recommended.. ========================================================================== Ubuntu Security Notice USN-8598-1 July 23, 2026 rsyslog vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 26.04 LTS - Ubuntu 24.04 LTS - Ubuntu 22.04 LTS Summary: Several security issues were fixed in rsyslog. Software Description: - rsyslog: Enhanced syslogd Details: It was discovered that rsyslog incorrectly handled regex-based TCP framing in the imptcp module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. It was discovered that rsyslog incorrectly handled oversized RFC5424 structured data in the mmpstrucdata module. A remote attacker could possibly use this issue to cause rsyslog to crash, resulting in a denial of service. (CVE-2026-61548) Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 26.04 LTS rsyslog 8.2512.0-1ubuntu4.1 Ubuntu 24.04 LTS rsyslog 8.2312.0-3ubuntu9.3 Ubuntu 22.04 LTS rsyslog 8.2112.0-2ubuntu2.4 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-8598-1 CVE-2026-61548 Package Information: https://launchpad.net/ubuntu/+source/rsyslog/8.2512.0-1ubuntu4.1 https://launchpad.net/ubuntu/+source/rsyslog/8.2312.0-3ubuntu9.3 https://launchpad.net/ubuntu/+source/rsyslog/8.2112.0-2ubuntu2.4 . Several critical security issues are fixed in rsyslog on Ubuntu including potential denial of service risks.. Ubuntu security advisory, rsyslog, denial of service, patch update. . Severity: Critical. LinuxSecurity.comTeam
Jul 23, 2026
•Critical
Ubuntu
91
security advisorygentooremote code executionGentoo: GLSA-202408-28 Normal: Rsyslog Heap Overflow Risk
A vulnerability has been discovered in rsyslog, which could possibly lead to remote code execution.. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 202408-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - https://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity: Normal Title: rsyslog: Heap Buffer Overflow Date: August 11, 2024 Bugs: #842846 ID: 202408-28 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Synopsis ======== A vulnerability has been discovered in rsyslog, which could possibly lead to remote code execution. Background ========== rsyslog is an enhanced multi-threaded syslogd with database support and more. Affected packages ================= Package Vulnerable Unaffected ----------------- ------------ ------------ app-admin/rsyslog < 8.2206.0 > = 8.2206.0 Description =========== Multiple vulnerabilities have been discovered in rsyslog. Please review the CVE identifiers referenced below for details. Impact ====== Modules for TCP syslog reception have a heap buffer overflow when octet- counted framing is used. The attacker can corrupt heap values, leading to data integrity issues and availability impact. Remote code execution is unlikely to happen but not impossible. Workaround ========== There is no known workaround at this time. Resolution ========== All rsyslog users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose "> =app-admin/rsyslog-8.2206.0" References ========== [ 1 ] CVE-2022-24903 https://nvd.nist.gov/vuln/detail/CVE-2022-24903 Availability ============ This GLSA and any updates to it are available for viewing at the Gentoo Security Website: https://security.gentoo.org/glsa/202408-28 Concerns? ========= Security is a primary focus of Gentoo Linux andensuring the confidentiality and security of our users' machines is of utmost importance to us. Any security concerns should be addressed to
Aug 11, 2024
Gentoo
219
security advisorysecurity updateimportantRocky Linux 8 RLSA-2022:4799 Important: Rsyslog Security Update
Important: rsyslog security update. \{'type': 'Security', 'shortCode': 'RL', 'name': 'RLSA-2022:4799', 'synopsis': 'Important: rsyslog security update', 'severity': 'Important', 'topic': 'An update for rsyslog is now available for Rocky Linux 8.\nRocky Linux Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.', 'description': 'The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.', 'solution': None, 'affectedProducts': ['Rocky Linux 8'], 'fixes': ['2081353'], 'cves': ['Red Hat:::https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-24903.json:::CVE-2022-24903'], 'references': [], 'publishedAt': '2022-07-07T20:12:04.396550Z', 'rpms': ['rsyslog-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-8.2102.0-7.el8_6.1.src.rpm', 'rsyslog-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-crypto-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-crypto-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-crypto-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-crypto-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-debugsource-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-debugsource-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-doc-8.2102.0-7.el8_6.1.noarch.rpm', 'rsyslog-elasticsearch-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-elasticsearch-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-elasticsearch-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-elasticsearch-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm','rsyslog-gnutls-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-gnutls-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-gnutls-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-gnutls-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-gssapi-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-gssapi-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-gssapi-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-gssapi-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-kafka-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-kafka-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-kafka-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-kafka-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmaudit-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmaudit-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmaudit-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmaudit-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmfields-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmfields-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmfields-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmfields-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmjsonparse-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmjsonparse-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmjsonparse-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmjsonparse-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmkubernetes-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmkubernetes-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmkubernetes-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmkubernetes-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmnormalize-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmnormalize-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmnormalize-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmnormalize-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmsnmptrapd-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmsnmptrapd-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mmsnmptrapd-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mmsnmptrapd-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm','rsyslog-mysql-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mysql-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-mysql-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-mysql-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-omamqp1-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-omamqp1-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-omamqp1-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-omamqp1-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-openssl-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-openssl-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-openssl-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-openssl-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-pgsql-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-pgsql-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-pgsql-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-pgsql-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-relp-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-relp-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-relp-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-relp-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-snmp-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-snmp-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-snmp-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-snmp-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-udpspoof-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-udpspoof-8.2102.0-7.el8_6.1.x86_64.rpm', 'rsyslog-udpspoof-debuginfo-8.2102.0-7.el8_6.1.aarch64.rpm', 'rsyslog-udpspoof-debuginfo-8.2102.0-7.el8_6.1.x86_64.rpm']}\. The latest patch for rsyslog on Rocky Linux 8 resolves significant vulnerabilities, offering comprehensive fixes and enhancements to bolster system security.. Rsyslog Update, System Security, Rocky Linux 8. . Severity: Important. LinuxSecurity.com Team
Sep 02, 2022
•Important
Rocky Linux
100
security advisoryimportantheap overflowSUSE Linux Enterprise: 2022:2333-1 Important: Rsyslog Heap Overflow
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2333-1 Rating: important References: #1199061 Cross-References: CVE-2022-24903 CVSS scores: CVE-2022-24903 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-24903 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: SUSE Linux Enterprise Server 12-SP2-BCL ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following issues: - CVE-2022-24903: Fixed potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 12-SP2-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2022-2333=1 Package List: - SUSE Linux Enterprise Server 12-SP2-BCL (x86_64): rsyslog-8.4.0-18.16.1 rsyslog-debuginfo-8.4.0-18.16.1 rsyslog-debugsource-8.4.0-18.16.1 rsyslog-diag-tools-8.4.0-18.16.1 rsyslog-diag-tools-debuginfo-8.4.0-18.16.1 rsyslog-doc-8.4.0-18.16.1 rsyslog-module-gssapi-8.4.0-18.16.1 rsyslog-module-gssapi-debuginfo-8.4.0-18.16.1 rsyslog-module-gtls-8.4.0-18.16.1 rsyslog-module-gtls-debuginfo-8.4.0-18.16.1 rsyslog-module-mysql-8.4.0-18.16.1 rsyslog-module-mysql-debuginfo-8.4.0-18.16.1 rsyslog-module-pgsql-8.4.0-18.16.1 rsyslog-module-pgsql-debuginfo-8.4.0-18.16.1 rsyslog-module-relp-8.4.0-18.16.1 rsyslog-module-relp-debuginfo-8.4.0-18.16.1 rsyslog-module-snmp-8.4.0-18.16.1 rsyslog-module-snmp-debuginfo-8.4.0-18.16.1 rsyslog-module-udpspoof-8.4.0-18.16.1 rsyslog-module-udpspoof-debuginfo-8.4.0-18.16.1 References: https://www.suse.com/security/cve/CVE-2022-24903.html https://bugzilla.suse.com/1199061 . Important SUSE patch addresses rsyslog heap overflow weakness with significant severity, ready for impacted devices.. SUSE Security Update, Rsyslog Patch, Heap Overflow Fix. . Severity: Important. LinuxSecurity.com Team
Jul 08, 2022
•Important
SuSE
100
security advisorybuffer overflowSUSESUSE 2022:2331-1 Important: Rsyslog Heap Buffer Overflow Patch
An update that fixes one vulnerability is now available. . SUSE Security Update: Security update for rsyslog ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2331-1 Rating: important References: #1199061 Cross-References: CVE-2022-24903 CVSS scores: CVE-2022-24903 (NVD) : 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-24903 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Affected Products: HPE Helion Openstack 8 SUSE Linux Enterprise Server 12-SP3-BCL SUSE Linux Enterprise Server 12-SP3-LTSS SUSE Linux Enterprise Server 12-SP4-LTSS SUSE Linux Enterprise Server for SAP 12-SP3 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 ______________________________________________________________________________ An update that fixes one vulnerability is now available. Description: This update for rsyslog fixes the following issues: - CVE-2022-24903: fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2022-2331=1 - SUSE OpenStack Cloud Crowbar 8: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2022-2331=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2022-2331=1 - SUSE OpenStack Cloud 8: zypper in -t patch SUSE-OpenStack-Cloud-8-2022-2331=1 - SUSE LinuxEnterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2022-2331=1 - SUSE Linux Enterprise Server for SAP 12-SP3: zypper in -t patch SUSE-SLE-SAP-12-SP3-2022-2331=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2022-2331=1 - SUSE Linux Enterprise Server 12-SP3-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP3-2022-2331=1 - SUSE Linux Enterprise Server 12-SP3-BCL: zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2022-2331=1 - HPE Helion Openstack 8: zypper in -t patch HPE-Helion-OpenStack-8-2022-2331=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mmnormalize-8.24.0-3.58.2 rsyslog-module-mmnormalize-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE OpenStack Cloud Crowbar 8 (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE OpenStack Cloud 9 (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mmnormalize-8.24.0-3.58.2 rsyslog-module-mmnormalize-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE OpenStack Cloud 8 (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE Linux Enterprise Server for SAP 12-SP4 (ppc64le x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mmnormalize-8.24.0-3.58.2 rsyslog-module-mmnormalize-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE Linux Enterprise Server for SAP 12-SP3 (ppc64le x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE Linux Enterprise Server 12-SP4-LTSS (aarch64 ppc64le s390x x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mmnormalize-8.24.0-3.58.2 rsyslog-module-mmnormalize-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE Linux Enterprise Server 12-SP3-LTSS (aarch64 ppc64le s390x x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - SUSE Linux Enterprise Server 12-SP3-BCL (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 - HPE Helion Openstack 8 (x86_64): rsyslog-8.24.0-3.58.2 rsyslog-debuginfo-8.24.0-3.58.2 rsyslog-debugsource-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-diag-tools-debuginfo-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gssapi-debuginfo-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-gtls-debuginfo-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-mysql-debuginfo-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-pgsql-debuginfo-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-relp-debuginfo-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-snmp-debuginfo-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-udpspoof-debuginfo-8.24.0-3.58.2 References: https://www.suse.com/security/cve/CVE-2022-24903.html https://bugzilla.suse.com/1199061 . Addresses severe buffer overflow vulnerability in rsyslog with essential patch for various SUSE platforms.. SUSE Rsyslog Update, Security Advisory, Critical Patch Instructions. . Severity: Important. LinuxSecurity.com Team
Jul 07, 2022
•Important
SuSE
217
security advisorycritical issueheap overflowOracle Linux 9 ELSA-2022-4795 Critical: Rsyslog Heap Overflow Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-4795 https://linux.oracle.com/errata/ELSA-2022-4795.html The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable LinuxNetwork: x86_64: rsyslog-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-crypto-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-doc-8.2102.0-101.el9_0.1.noarch.rpm rsyslog-elasticsearch-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-gnutls-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-gssapi-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-kafka-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-logrotate-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmaudit-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmfields-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmjsonparse-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmkubernetes-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmnormalize-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mmsnmptrapd-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-mysql-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-omamqp1-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-openssl-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-pgsql-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-relp-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-snmp-8.2102.0-101.el9_0.1.x86_64.rpm rsyslog-udpspoof-8.2102.0-101.el9_0.1.x86_64.rpm aarch64: rsyslog-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-crypto-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-doc-8.2102.0-101.el9_0.1.noarch.rpm rsyslog-elasticsearch-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-gnutls-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-gssapi-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-kafka-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-logrotate-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmaudit-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmfields-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmjsonparse-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmkubernetes-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmnormalize-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mmsnmptrapd-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-mysql-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-omamqp1-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-openssl-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-pgsql-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-relp-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-snmp-8.2102.0-101.el9_0.1.aarch64.rpm rsyslog-udpspoof-8.2102.0-101.el9_0.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol9/SRPMS-updates/rsyslog-8.2102.0-101.el9_0.1.src.rpm Related CVEs: CVE-2022-24903 Description of changes: [8.2102.0-101.1] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081402 _______________________________________________ El-errata mailing list
Jul 01, 2022
•Critical
Oracle
217
security advisoryheap overflowimportant updateOracle Linux 7 ELSA-2022-4803 Moderate: Rsyslog Heap Overflow
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-4803 https://linux.oracle.com/errata/ELSA-2022-4803.html The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: x86_64: rsyslog-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-crypto-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-doc-8.24.0-57.0.1.el7_9.3.noarch.rpm rsyslog-elasticsearch-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-gnutls-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-gssapi-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-kafka-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-libdbi-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mmaudit-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mmjsonparse-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mmkubernetes-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mmnormalize-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mmsnmptrapd-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-mysql-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-pgsql-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-relp-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-snmp-8.24.0-57.0.1.el7_9.3.x86_64.rpm rsyslog-udpspoof-8.24.0-57.0.1.el7_9.3.x86_64.rpm SRPMS: https://oss.oracle.com:443/ol7/SRPMS-updates/rsyslog-8.24.0-57.0.1.el7_9.3.src.rpm Related CVEs: CVE-2022-24903 Description of changes: [8.24.0-57.0.1.el7_9.3] - added patch to flush the journal state file [Orabug: 32583987] (
May 31, 2022
•Important
Oracle
217
security advisoryupdatecriticalOracle Linux: ELSA-2022-4799 Critical: Rsyslog Heap Overflow Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network: . Oracle Linux Security Advisory ELSA-2022-4799 https://linux.oracle.com/errata/ELSA-2022-4799.html The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable LinuxNetwork: x86_64: rsyslog-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-crypto-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-doc-8.2102.0-7.el8_6.1.noarch.rpm rsyslog-elasticsearch-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-gnutls-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-gssapi-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-kafka-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmaudit-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmfields-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmjsonparse-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmkubernetes-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmnormalize-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mmsnmptrapd-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-mysql-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-omamqp1-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-openssl-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-pgsql-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-relp-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-snmp-8.2102.0-7.el8_6.1.x86_64.rpm rsyslog-udpspoof-8.2102.0-7.el8_6.1.x86_64.rpm aarch64: rsyslog-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-crypto-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-doc-8.2102.0-7.el8_6.1.noarch.rpm rsyslog-elasticsearch-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-gnutls-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-gssapi-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-kafka-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmaudit-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmfields-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmjsonparse-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmkubernetes-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmnormalize-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mmsnmptrapd-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-mysql-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-omamqp1-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-openssl-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-pgsql-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-relp-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-snmp-8.2102.0-7.el8_6.1.aarch64.rpm rsyslog-udpspoof-8.2102.0-7.el8_6.1.aarch64.rpm SRPMS: https://oss.oracle.com:443/ol8/SRPMS-updates/rsyslog-8.2102.0-7.el8_6.1.src.rpm Related CVEs: CVE-2022-24903 Description ofchanges: [8.2102.0-7.1] - Address CVE-2022-24903, Heap-based overflow in TCP syslog server resolves: rhbz#2081400 _______________________________________________ El-errata mailing list
May 31, 2022
•Critical
Oracle
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!