Security update for librelp (important)

2018-03-2718:08:19

lists.opensuse.org

0.39 Low

EPSS

Percentile

97.3%

JSON

This update for librelp fixes the following issues:

 CVE-2018-1000140 (bsc#1086730): librelp contained a stack-based buffer

overflow in the checking of x509 certificates. A remote attacker with an
access to the rsyslog logging facility could have exploited it by sending
a specially crafted x509 certificate.

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server12.2x86_64librelp0-debuginfo< 1.2.7-3.3.1librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS12.1s390xlibrelp0-debuginfo< 1.2.7-3.3.1librelp0-debuginfo-1.2.7-3.3.1.s390x.rpm
SUSE Linux Enterprise Server12.2aarch64librelp0< 1.2.7-3.3.1librelp0-1.2.7-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server12.2s390xlibrelp0< 1.2.7-3.3.1librelp0-1.2.7-3.3.1.s390x.rpm
SUSE Linux Enterprise Server for SAP12.1ppc64lelibrelp0< 1.2.7-3.3.1librelp0-1.2.7-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server LTSS12.1ppc64lelibrelp0< 1.2.7-3.3.1librelp0-1.2.7-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server for SAP12.1x86_64librelp0-debuginfo< 1.2.7-3.3.1librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE OpenStack Cloud6x86_64librelp0-debuginfo< 1.2.7-3.3.1librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS12.1x86_64librelp0-debuginfo< 1.2.7-3.3.1librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit12.2aarch64librelp-debugsource< 1.2.7-3.3.1librelp-debugsource-1.2.7-3.3.1.aarch64.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Server	12.2	x86_64	librelp0-debuginfo	< 1.2.7-3.3.1	librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS	12.1	s390x	librelp0-debuginfo	< 1.2.7-3.3.1	librelp0-debuginfo-1.2.7-3.3.1.s390x.rpm
SUSE Linux Enterprise Server	12.2	aarch64	librelp0	< 1.2.7-3.3.1	librelp0-1.2.7-3.3.1.aarch64.rpm
SUSE Linux Enterprise Server	12.2	s390x	librelp0	< 1.2.7-3.3.1	librelp0-1.2.7-3.3.1.s390x.rpm
SUSE Linux Enterprise Server for SAP	12.1	ppc64le	librelp0	< 1.2.7-3.3.1	librelp0-1.2.7-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server LTSS	12.1	ppc64le	librelp0	< 1.2.7-3.3.1	librelp0-1.2.7-3.3.1.ppc64le.rpm
SUSE Linux Enterprise Server for SAP	12.1	x86_64	librelp0-debuginfo	< 1.2.7-3.3.1	librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE OpenStack Cloud	6	x86_64	librelp0-debuginfo	< 1.2.7-3.3.1	librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS	12.1	x86_64	librelp0-debuginfo	< 1.2.7-3.3.1	librelp0-debuginfo-1.2.7-3.3.1.x86_64.rpm
SUSE Linux Enterprise Software Development Kit	12.2	aarch64	librelp-debugsource	< 1.2.7-3.3.1	librelp-debugsource-1.2.7-3.3.1.aarch64.rpm