Security update for rsyslog SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0209-1 Final 1 1 2019-01-31T08:41:30Z current 2019-01-31T08:41:30Z 2019-01-31T08:41:30Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for rsyslog This update for rsyslog fixes the following issues: Security issue fixed: - CVE-2018-16881: Fixed a denial of service when both the imtcp module and Octet-Counted TCP Framing is enabled (bsc#1123164). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container caasp/v4/haproxy:beta1-2019-209,Image SLES12-SP4-Azure-BYOS-2019-209,Image SLES12-SP4-EC2-HVM-BYOS-2019-209,Image SLES12-SP4-GCE-BYOS-2019-209,Image SLES12-SP4-OCI-BYOS-2019-209,Image SLES12-SP4-SAP-Azure-2019-209,Image SLES12-SP4-SAP-Azure-BYOS-2019-209,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2019-209,Image SLES12-SP4-SAP-EC2-HVM-2019-209,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-209,Image SLES12-SP4-SAP-GCE-2019-209,Image SLES12-SP4-SAP-GCE-BYOS-2019-209,Image SLES12-SP4-SAP-OCI-BYOS-2019-209,Image SLES12-SP5-OCI-BYOS-BYOS-2019-209,Image SLES12-SP5-OCI-BYOS-SAP-BYOS-2019-209,SUSE-2019-209,SUSE-SLE-DESKTOP-12-SP3-2019-209,SUSE-SLE-DESKTOP-12-SP4-2019-209,SUSE-SLE-SERVER-12-SP3-2019-209,SUSE-SLE-SERVER-12-SP4-2019-209 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190209-1/ Link for SUSE-SU-2019:0209-1 https://www.suse.com/support/update/announcement/2019/suse-su-20190209-1.html E-Mail link for SUSE-SU-2019:0209-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1123164 SUSE Bug 1123164 https://www.suse.com/security/cve/CVE-2018-16881/ SUSE CVE CVE-2018-16881 page Container caasp/v4/haproxy:beta1 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS Image SLES12-SP5-OCI-BYOS-BYOS Image SLES12-SP5-OCI-BYOS-SAP-BYOS SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-8.24.0-3.19.1 rsyslog-diag-tools-8.24.0-3.19.1 rsyslog-doc-8.24.0-3.19.1 rsyslog-module-dbi-8.24.0-3.19.1 rsyslog-module-elasticsearch-8.24.0-3.19.1 rsyslog-module-gcrypt-8.24.0-3.19.1 rsyslog-module-gssapi-8.24.0-3.19.1 rsyslog-module-gtls-8.24.0-3.19.1 rsyslog-module-guardtime-8.24.0-3.19.1 rsyslog-module-mmnormalize-8.24.0-3.19.1 rsyslog-module-mysql-8.24.0-3.19.1 rsyslog-module-omamqp1-8.24.0-3.19.1 rsyslog-module-omhttpfs-8.24.0-3.19.1 rsyslog-module-omtcl-8.24.0-3.19.1 rsyslog-module-pgsql-8.24.0-3.19.1 rsyslog-module-relp-8.24.0-3.19.1 rsyslog-module-snmp-8.24.0-3.19.1 rsyslog-module-udpspoof-8.24.0-3.19.1 rsyslog-8.24.0-3.19.1 as a component of Container caasp/v4/haproxy:beta1 rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-Azure-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-GCE-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-OCI-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-Azure rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-GCE rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP5-OCI-BYOS-BYOS rsyslog-8.24.0-3.19.1 as a component of Image SLES12-SP5-OCI-BYOS-SAP-BYOS rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-diag-tools-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-doc-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-gssapi-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-gtls-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-mysql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-pgsql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-relp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-snmp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-module-udpspoof-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP3 rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-diag-tools-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-doc-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-gssapi-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-gtls-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-mysql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-pgsql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-relp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-snmp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-module-udpspoof-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server 12 SP4 rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-diag-tools-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-doc-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-gssapi-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-gtls-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-mysql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-pgsql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-relp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-snmp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-udpspoof-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-diag-tools-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-doc-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-gssapi-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-gtls-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-mysql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-pgsql-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-relp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-snmp-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-udpspoof-8.24.0-3.19.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 A denial of service vulnerability was found in rsyslog in the imptcp module. An attacker could send a specially crafted message to the imptcp socket, which would cause rsyslog to crash. Versions before 8.27.0 are vulnerable. CVE-2018-16881 Container caasp/v4/haproxy:beta1:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-Azure-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-EC2-HVM-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-GCE-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-OCI-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-Azure-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-Azure:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-EC2-HVM:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-GCE-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-GCE:rsyslog-8.24.0-3.19.1 Image SLES12-SP4-SAP-OCI-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP5-OCI-BYOS-BYOS:rsyslog-8.24.0-3.19.1 Image SLES12-SP5-OCI-BYOS-SAP-BYOS:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Desktop 12 SP3:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Desktop 12 SP4:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-diag-tools-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-doc-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-gssapi-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-gtls-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-mysql-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-pgsql-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-relp-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-snmp-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP3:rsyslog-module-udpspoof-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-diag-tools-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-doc-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-gssapi-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-gtls-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-mysql-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-pgsql-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-relp-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-snmp-8.24.0-3.19.1 SUSE Linux Enterprise Server 12 SP4:rsyslog-module-udpspoof-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-diag-tools-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-doc-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-gssapi-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-gtls-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-mysql-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-pgsql-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-relp-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-snmp-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-udpspoof-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-diag-tools-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-doc-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-gssapi-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-gtls-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-mysql-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-pgsql-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-relp-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-snmp-8.24.0-3.19.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-udpspoof-8.24.0-3.19.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190209-1/ https://www.suse.com/security/cve/CVE-2018-16881.html CVE-2018-16881 https://bugzilla.suse.com/1123164 SUSE Bug 1123164