Red Hat Security AdvisoryRHSA-2018:1223
librelp security update
Released 2018-04-24 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) librelp-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux Client Optional (v. 7) librelp-devel-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux ComputeNode (v. 7) librelp-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) librelp-devel-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux Server (v. 7) librelp-1.2.12-1.el7_5.1, librelp-1.2.12-1.el7_5.1.ppc
- Red Hat Enterprise Linux Server Optional (v. 7) librelp-devel-1.2.12-1.el7_5.1, librelp-devel-1.2.12-1.el7_5.1.ppc
- Red Hat Enterprise Linux Workstation (v. 7) librelp-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux Workstation Optional (v. 7) librelp-devel-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server (v. 7) librelp-1.2.12-1.el7_5.1
- Red Hat Enterprise Linux for ARM and IBM Power LE (POWER9) Server Optional (v. 7) librelp-devel-1.2.12-1.el7_5.1
Fixes 1 record
Priority MEDIUM 54
rsyslog librelp version 1.2.14 and earlier contains a Buffer Overflow vulnerability in the checking of x509 certificates from a peer that can result in Remote code execution.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.09342 · Published 2018-03-23 · Fixed CWE-787
