Mailinglist Archive: opensuse-updates (37 mails)

[opensuse-security@xxxxxxxxxxxx]

   openSUSE Security Update: rsyslog
______________________________________________________________________________

Announcement ID:    openSUSE-SU-2011:1020-1
Rating:             moderate
References:         #714658 
Cross-References:   CVE-2011-3200
Affected Products:
                    openSUSE 11.4
                    openSUSE 11.3
______________________________________________________________________________

   An update that fixes one vulnerability is now available. It
   includes one version update.

Description:

   Specially crafted log messages could crash rsyslogd
   (CVE-2011-3200).


Patch Instructions:

   To install this openSUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - openSUSE 11.4:

      zypper in -t patch rsyslog-5099

   - openSUSE 11.3:

      zypper in -t patch rsyslog-5099

   To bring your system up-to-date, use "zypper patch".


Package List:

   - openSUSE 11.4 (i586 x86_64) [New Version: 5.6.5]:

      rsyslog-5.6.5-1.5.1
      rsyslog-diag-tools-5.6.5-1.5.1
      rsyslog-doc-5.6.5-1.5.1
      rsyslog-module-dbi-5.6.5-1.5.1
      rsyslog-module-gssapi-5.6.5-1.5.1
      rsyslog-module-gtls-5.6.5-1.5.1
      rsyslog-module-mysql-5.6.5-1.5.1
      rsyslog-module-pgsql-5.6.5-1.5.1
      rsyslog-module-relp-5.6.5-1.5.1
      rsyslog-module-snmp-5.6.5-1.5.1
      rsyslog-module-udpspoof-5.6.5-1.5.1

   - openSUSE 11.3 (i586 x86_64):

      rsyslog-5.4.0-3.2.1
      rsyslog-diag-tools-5.4.0-3.2.1
      rsyslog-doc-5.4.0-3.2.1
      rsyslog-module-gssapi-5.4.0-3.2.1
      rsyslog-module-gtls-5.4.0-3.2.1
      rsyslog-module-mysql-5.4.0-3.2.1
      rsyslog-module-pgsql-5.4.0-3.2.1
      rsyslog-module-relp-5.4.0-3.2.1
      rsyslog-module-snmp-5.4.0-3.2.1
      rsyslog-module-udpspoof-5.4.0-3.2.1


References:

   http://support.novell.com/security/cve/CVE-2011-3200.html
   https://bugzilla.novell.com/714658