RHSA-2022:4799: Important: rsyslog security update
Published May 30, 2022
·Updated
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.Security Fix(es): rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
157 affected componentsFixes available
redhat/rsyslog<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debugsource<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-doc<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debugsource<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-crypto-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-debugsource<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gnutls-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-gssapi-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-kafka-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmfields-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-mysql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-openssl-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-pgsql-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-relp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-snmp-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-7.el8_6.1
8.2102.0-7.el8_6.1
redhat/rsyslog<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-crypto<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-crypto-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-debugsource<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-elasticsearch<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-elasticsearch-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-gnutls<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-gnutls-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-gssapi<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-gssapi-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-kafka<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-kafka-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmaudit<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmaudit-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmfields<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmfields-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmjsonparse<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmjsonparse-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmkubernetes<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmkubernetes-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmnormalize<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmnormalize-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmsnmptrapd<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mmsnmptrapd-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mysql<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-mysql-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-omamqp1<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-omamqp1-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-openssl<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-openssl-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-pgsql<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-pgsql-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-relp<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-relp-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-snmp<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-snmp-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-udpspoof<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
redhat/rsyslog-udpspoof-debuginfo<8.2102.0-7.el8_6.1.aa
8.2102.0-7.el8_6.1.aa
Remediation
Event History
Jan 31, 2024
Advisory Published
via Red Hat·11:15 PM
Frequently Asked Questions
1
What is the severity of RHSA-2022:4799?
The severity of RHSA-2022:4799 is classified as important due to a heap-based overflow in the TCP syslog function.
2
How do I fix RHSA-2022:4799?
To fix RHSA-2022:4799, you need to update the rsyslog package to version 8.2102.0-7.el8_6.1 or later.
3
Which systems are affected by RHSA-2022:4799?
RHSA-2022:4799 affects the rsyslog packages on Red Hat Enterprise Linux 8 systems.
4
What is the nature of the vulnerability in RHSA-2022:4799?
The vulnerability in RHSA-2022:4799 involves a heap-based overflow that could allow for remote code execution under certain conditions.
5
When was RHSA-2022:4799 released by Red Hat?
RHSA-2022:4799 was released by Red Hat on November 11, 2022.