gpp_maybe Security update for librelp

SUSE-SLE-SERVER-12-SP2-2018-553

This update for librelp fixes the following issues: CVE-2018-1000140 (bsc#1086730): librelp contained a stack-based buffer overflow in the checking of x509 certificates. A remote attacker with an access to the rsyslog logging facility could have exploited it by sending a specially crafted x509 certificate.

• Release Date
  Mar 27 2018
• References
  Bugzilla: 1086730
  CVEs: CVE-2018-1000140
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  librelp
  A reliable logging library

  1.2.7-3.3.1

  lock src

  librelp0
  A reliable logging library

  1.2.7-3.3.1

  lock rpm

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  librelp
  A reliable logging library

  1.2.7-3.3.1

  lock src

  librelp0
  A reliable logging library

  1.2.7-3.3.1

  lock rpm

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  librelp
  A reliable logging library

  1.2.7-3.3.1

  lock src

  librelp0
  A reliable logging library

  1.2.7-3.3.1

  lock rpm

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  librelp
  A reliable logging library

  1.2.7-3.3.1

  lock src

  librelp0
  A reliable logging library

  1.2.7-3.3.1

  lock rpm