SUSE-SU-2018:1937-2

Опубликовано: 12 июл. 2018

Источник: suse-cvrf

Описание

Security update for rsyslog

This update for rsyslog fixes the following security issue:

CVE-2015-3243: Prevent weak permissions for generated log files, which allowed local users to obtain sensitive information (bsc#935393).

rsyslog-8.33.1-3.3.1

rsyslog-module-gssapi-8.33.1-3.3.1

rsyslog-module-mysql-8.33.1-3.3.1

rsyslog-module-pgsql-8.33.1-3.3.1

rsyslog-module-relp-8.33.1-3.3.1

rsyslog-module-snmp-8.33.1-3.3.1

rsyslog-module-udpspoof-8.33.1-3.3.1

rsyslog uses weak permissions for generating log files, which allows local users to obtain sensitive information by reading files in /var/log/cron.

SUSE Linux Enterprise Module for Basesystem 15:rsyslog-8.33.1-3.3.1

SUSE Linux Enterprise Module for Server Applications 15:rsyslog-module-gssapi-8.33.1-3.3.1

SUSE Linux Enterprise Module for Server Applications 15:rsyslog-module-mysql-8.33.1-3.3.1

SUSE Linux Enterprise Module for Server Applications 15:rsyslog-module-pgsql-8.33.1-3.3.1