RHSA-2022:4802: Important: rsyslog security update
Published May 30, 2022
·Updated
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.Security Fix(es): rsyslog: Heap-based overflow in TCP syslog server (CVE-2022-24903) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
141 affected componentsFixes available
redhat/rsyslog<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debugsource<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-doc<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debugsource<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-crypto-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-debugsource<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-elasticsearch-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gnutls-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-gssapi-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-kafka-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmaudit-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmjsonparse-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmkubernetes-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmnormalize-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mmsnmptrapd-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-mysql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-omamqp1-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-pgsql-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-relp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-snmp-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog-udpspoof-debuginfo<8.1911.0-7.el8_4.3
8.1911.0-7.el8_4.3
redhat/rsyslog<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-crypto<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-crypto-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-debugsource<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-elasticsearch<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-elasticsearch-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-gnutls<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-gnutls-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-gssapi<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-gssapi-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-kafka<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-kafka-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmaudit<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmaudit-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmjsonparse<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmjsonparse-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmkubernetes<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmkubernetes-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmnormalize<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmnormalize-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmsnmptrapd<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mmsnmptrapd-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mysql<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-mysql-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-omamqp1<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-omamqp1-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-pgsql<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-pgsql-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-relp<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-relp-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-snmp<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-snmp-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-udpspoof<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
redhat/rsyslog-udpspoof-debuginfo<8.1911.0-7.el8_4.3.aa
8.1911.0-7.el8_4.3.aa
Remediation
Event History
Feb 9, 2026
Advisory Published
via Red Hat·06:23 PM
Data Sourced
via Red Hat·06:23 PM
RemedyDescriptionAffected Software
Frequently Asked Questions
1
What is the severity of RHSA-2022:4802?
RHSA-2022:4802 is classified as important severity.
2
How do I fix RHSA-2022:4802?
To fix RHSA-2022:4802, upgrade the rsyslog packages to version 8.1911.0-7.el8_4.3 or later.
3
What vulnerabilities does RHSA-2022:4802 address?
RHSA-2022:4802 addresses a heap-based overflow vulnerability in TCP syslog.
4
Which systems are affected by RHSA-2022:4802?
RHSA-2022:4802 affects the rsyslog packages on Red Hat Enterprise Linux 8.
5
When was RHSA-2022:4802 released?
RHSA-2022:4802 was released on December 7, 2022.