< back to search

gpp_maybe Security update for librelp

SUSE-SLE-SERVER-12-2018-553

This update for librelp fixes the following issues: CVE-2018-1000140 (bsc#1086730): librelp contained a stack-based buffer overflow in the checking of x509 certificates. A remote attacker with an access to the rsyslog logging facility could have exploited it by sending a specially crafted x509 certificate.

Release Date

Mar 27 2018
References

Bugzilla: 1086730
CVEs: CVE-2018-1000140
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server LTSS 12 s390x

Packages

librelp
A reliable logging library

1.2.7-3.3.1 lock src

librelp0
A reliable logging library

1.2.7-3.3.1 lock rpm

SUSE Linux Enterprise Server LTSS 12 x86_64

Packages

librelp
A reliable logging library

1.2.7-3.3.1 lock src

librelp0
A reliable logging library

1.2.7-3.3.1 lock rpm