SUSE-RU-2023:4461-1: Recommended update for rsyslog
This update for rsyslog fixes the following issue: fix rsyslog crash in imrelp (bsc#1210286)
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/rsyslog-module-pgsqlto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-udpspoofto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-udpspoof-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-mysql-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-gssapito a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-debugsourceto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-gssapi-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-mysqlto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-relp-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-mmnormalize-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-relpto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-gtlsto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslogto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-snmpto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-gtls-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
suse/rsyslog-module-mmnormalizeto a version that resolves this vulnerability.Fixed in 8.2106.0-150200.4.43.2 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP2-LTSS-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-ESPOS-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-HPC-15-SP3-LTSS-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP2-LTSS-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES-15-SP3-LTSS-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP2-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SLES_SAP-15-SP3-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Proxy-4.2-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Retail-Branch-Server-4.2-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-SLE-Product-SUSE-Manager-Server-4.2-2023-4461=1 - Upgrade
Upgrade
rsyslogto a version that resolves this vulnerability.Patch SUSE-Storage-7.1-2023-4461=1
Event History
Frequently Asked Questions
Which systems are most likely exposed to this crash?
Systems using rsyslog with the imrelp input module are the relevant population, because the reported issue is a crash in imrelp. The listed update packages include rsyslog modules and related debug packages, but the data does not identify which configurations enable imrelp.
What is known about exploitation requirements or impact beyond a crash?
The available information identifies a crash in imrelp and classifies the update as medium severity with risk 19. It does not specify attacker access requirements, triggering input, or impacts beyond the rsyslog crash.
How can administrators determine whether the fix is applicable?
Review whether rsyslog is installed and configured to use the imrelp input module, then compare installed packages against the SUSE update referenced by SUSE-RU-2023:4461-1. The provided data does not include fixed package versions or a detection method for prior triggering.