rsyslog security update

2014-10-1319:45:27

CentOS Project

lists.centos.org

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.228 Low

EPSS

Percentile

96.5%

JSON

CentOS Errata and Security Advisory CESA-2014:1397

The rsyslog packages provide an enhanced, multi-threaded syslog daemon
that supports writing to relational databases, syslog/TCP, RFC 3195,
permitted sender lists, filtering on any message part, and fine grained
output format control.

A flaw was found in the way rsyslog handled invalid log message priority
values. In certain configurations, a local attacker, or a remote attacker
able to connect to the rsyslog port, could use this flaw to crash the
rsyslog daemon or, potentially, execute arbitrary code as the user running
the rsyslog daemon. (CVE-2014-3634)

Red Hat would like to thank Rainer Gerhards of rsyslog upstream for
reporting this issue.

All rsyslog users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
update, the rsyslog service will be restarted automatically.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2014-October/082843.html

Affected packages:
rsyslog
rsyslog-crypto
rsyslog-doc
rsyslog-elasticsearch
rsyslog-gnutls
rsyslog-gssapi
rsyslog-libdbi
rsyslog-mmaudit
rsyslog-mmjsonparse
rsyslog-mmnormalize
rsyslog-mmsnmptrapd
rsyslog-mysql
rsyslog-pgsql
rsyslog-relp
rsyslog-snmp
rsyslog-udpspoof

Upstream details at:
https://access.redhat.com/errata/RHSA-2014:1397

OSVersionArchitecturePackageVersionFilename
CentOS7x86_64rsyslog< 7.4.7-7.el7_0rsyslog-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-crypto< 7.4.7-7.el7_0rsyslog-crypto-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-doc< 7.4.7-7.el7_0rsyslog-doc-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-elasticsearch< 7.4.7-7.el7_0rsyslog-elasticsearch-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-gnutls< 7.4.7-7.el7_0rsyslog-gnutls-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-gssapi< 7.4.7-7.el7_0rsyslog-gssapi-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-libdbi< 7.4.7-7.el7_0rsyslog-libdbi-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-mmaudit< 7.4.7-7.el7_0rsyslog-mmaudit-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-mmjsonparse< 7.4.7-7.el7_0rsyslog-mmjsonparse-7.4.7-7.el7_0.x86_64.rpm
CentOS7x86_64rsyslog-mmnormalize< 7.4.7-7.el7_0rsyslog-mmnormalize-7.4.7-7.el7_0.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	7	x86_64	rsyslog	< 7.4.7-7.el7_0	rsyslog-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-crypto	< 7.4.7-7.el7_0	rsyslog-crypto-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-doc	< 7.4.7-7.el7_0	rsyslog-doc-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-elasticsearch	< 7.4.7-7.el7_0	rsyslog-elasticsearch-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-gnutls	< 7.4.7-7.el7_0	rsyslog-gnutls-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-gssapi	< 7.4.7-7.el7_0	rsyslog-gssapi-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-libdbi	< 7.4.7-7.el7_0	rsyslog-libdbi-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-mmaudit	< 7.4.7-7.el7_0	rsyslog-mmaudit-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-mmjsonparse	< 7.4.7-7.el7_0	rsyslog-mmjsonparse-7.4.7-7.el7_0.x86_64.rpm
CentOS	7	x86_64	rsyslog-mmnormalize	< 7.4.7-7.el7_0	rsyslog-mmnormalize-7.4.7-7.el7_0.x86_64.rpm