Synopsis: Moderate: rsyslog5 and rsyslog security update
Advisory ID: SLSA-2014:1671-1
Issue Date: 2014-10-20
CVE Numbers: CVE-2014-3634
—
A flaw was found in the way rsyslog handled invalid log message priority
values. In certain configurations, a local attacker, or a remote attacker
able to connect to the rsyslog port, could use this flaw to crash the
rsyslog daemon. (CVE-2014-3634)
After installing the update, the rsyslog service will be restarted
automatically.
—
SL5
x86_64
rsyslog5-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-debuginfo-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-gnutls-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-gssapi-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-mysql-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-pgsql-5.8.12-5.el5_11.x86_64.rpm
rsyslog5-snmp-5.8.12-5.el5_11.x86_64.rpm
i386
rsyslog5-5.8.12-5.el5_11.i386.rpm
rsyslog5-debuginfo-5.8.12-5.el5_11.i386.rpm
rsyslog5-gnutls-5.8.12-5.el5_11.i386.rpm
rsyslog5-gssapi-5.8.12-5.el5_11.i386.rpm
rsyslog5-mysql-5.8.12-5.el5_11.i386.rpm
rsyslog5-pgsql-5.8.12-5.el5_11.i386.rpm
rsyslog5-snmp-5.8.12-5.el5_11.i386.rpm
SL6
x86_64
rsyslog-5.8.10-9.el6_6.x86_64.rpm
rsyslog-debuginfo-5.8.10-9.el6_6.x86_64.rpm
rsyslog-gnutls-5.8.10-9.el6_6.x86_64.rpm
rsyslog-gssapi-5.8.10-9.el6_6.x86_64.rpm
rsyslog-relp-5.8.10-9.el6_6.x86_64.rpm
rsyslog-mysql-5.8.10-9.el6_6.x86_64.rpm
rsyslog-pgsql-5.8.10-9.el6_6.x86_64.rpm
rsyslog-snmp-5.8.10-9.el6_6.x86_64.rpm
i386
rsyslog-5.8.10-9.el6_6.i686.rpm
rsyslog-debuginfo-5.8.10-9.el6_6.i686.rpm
rsyslog-gnutls-5.8.10-9.el6_6.i686.rpm
rsyslog-gssapi-5.8.10-9.el6_6.i686.rpm
rsyslog-relp-5.8.10-9.el6_6.i686.rpm
rsyslog-mysql-5.8.10-9.el6_6.i686.rpm
rsyslog-pgsql-5.8.10-9.el6_6.i686.rpm
rsyslog-snmp-5.8.10-9.el6_6.i686.rpm
– Scientific Linux Development Team
