Security update for rsyslog SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2022:2331-1 Final 1 1 2022-07-07T13:33:40Z current 2022-07-07T13:33:40Z 2022-07-07T13:33:40Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for rsyslog This update for rsyslog fixes the following issues: - CVE-2022-24903: fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2022-2331,SUSE-2022-2331,SUSE-OpenStack-Cloud-8-2022-2331,SUSE-OpenStack-Cloud-9-2022-2331,SUSE-OpenStack-Cloud-Crowbar-8-2022-2331,SUSE-OpenStack-Cloud-Crowbar-9-2022-2331,SUSE-SLE-SAP-12-SP3-2022-2331,SUSE-SLE-SAP-12-SP4-2022-2331,SUSE-SLE-SERVER-12-SP3-2022-2331,SUSE-SLE-SERVER-12-SP3-BCL-2022-2331,SUSE-SLE-SERVER-12-SP4-LTSS-2022-2331 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2022/suse-su-20222331-1/ Link for SUSE-SU-2022:2331-1 https://lists.suse.com/pipermail/sle-security-updates/2022-July/011474.html E-Mail link for SUSE-SU-2022:2331-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1199061 SUSE Bug 1199061 https://www.suse.com/security/cve/CVE-2022-24903/ SUSE CVE CVE-2022-24903 page HPE Helion OpenStack 8 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 rsyslog-8.24.0-3.58.2 rsyslog-diag-tools-8.24.0-3.58.2 rsyslog-doc-8.24.0-3.58.2 rsyslog-module-gssapi-8.24.0-3.58.2 rsyslog-module-gtls-8.24.0-3.58.2 rsyslog-module-mysql-8.24.0-3.58.2 rsyslog-module-pgsql-8.24.0-3.58.2 rsyslog-module-relp-8.24.0-3.58.2 rsyslog-module-snmp-8.24.0-3.58.2 rsyslog-module-udpspoof-8.24.0-3.58.2 rsyslog-module-dbi-8.24.0-3.58.2 rsyslog-module-elasticsearch-8.24.0-3.58.2 rsyslog-module-gcrypt-8.24.0-3.58.2 rsyslog-module-guardtime-8.24.0-3.58.2 rsyslog-module-mmnormalize-8.24.0-3.58.2 rsyslog-module-omamqp1-8.24.0-3.58.2 rsyslog-module-omhttpfs-8.24.0-3.58.2 rsyslog-module-omtcl-8.24.0-3.58.2 rsyslog-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-diag-tools-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-doc-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-gtls-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-mysql-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-relp-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-snmp-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of HPE Helion OpenStack 8 rsyslog-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-doc-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL rsyslog-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-doc-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS rsyslog-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-doc-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-mmnormalize-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS rsyslog-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 rsyslog-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-mmnormalize-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 rsyslog-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 8 rsyslog-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-mmnormalize-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud 9 rsyslog-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 8 rsyslog-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-diag-tools-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-doc-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-gssapi-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-gtls-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-mmnormalize-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-mysql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-pgsql-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-relp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-snmp-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 rsyslog-module-udpspoof-8.24.0-3.58.2 as a component of SUSE OpenStack Cloud Crowbar 9 Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buffer overflow when octet-counted framing is used. This can result in a segfault or some other malfunction. As of our understanding, this vulnerability can not be used for remote code execution. But there may still be a slight chance for experts to do that. The bug occurs when the octet count is read. While there is a check for the maximum number of octets, digits are written to a heap buffer even when the octet count is over the maximum, This can be used to overrun the memory buffer. However, once the sequence of digits stop, no additional characters can be added to the buffer. In our opinion, this makes remote exploits impossible or at least highly complex. Octet-counted framing is one of two potential framing modes. It is relatively uncommon, but enabled by default on receivers. Modules `imtcp`, `imptcp`, `imgssapi`, and `imhttp` are used for regular syslog message reception. It is best practice not to directly expose them to the public. When this practice is followed, the risk is considerably lower. Module `imdiag` is a diagnostics module primarily intended for testbench runs. We do not expect it to be present on any production installation. Octet-counted framing is not very common. Usually, it needs to be specifically enabled at senders. If users do not need it, they can turn it off for the most important modules. This will mitigate the vulnerability. CVE-2022-24903 HPE Helion OpenStack 8:rsyslog-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-diag-tools-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-doc-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-gssapi-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-gtls-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-mysql-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-pgsql-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-relp-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-snmp-8.24.0-3.58.2 HPE Helion OpenStack 8:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-diag-tools-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-doc-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-gtls-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-mysql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-relp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-snmp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-BCL:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-diag-tools-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-doc-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-gtls-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-mysql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-relp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-snmp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP3-LTSS:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-diag-tools-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-doc-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-gtls-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-mmnormalize-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-mysql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-relp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-snmp-8.24.0-3.58.2 SUSE Linux Enterprise Server 12 SP4-LTSS:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-diag-tools-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-doc-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-gtls-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-mysql-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-relp-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-snmp-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-diag-tools-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-doc-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-gtls-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-mmnormalize-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-mysql-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-relp-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-snmp-8.24.0-3.58.2 SUSE Linux Enterprise Server for SAP Applications 12 SP4:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-diag-tools-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-doc-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-gtls-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-mysql-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-relp-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-snmp-8.24.0-3.58.2 SUSE OpenStack Cloud 8:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-diag-tools-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-doc-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-gtls-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-mmnormalize-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-mysql-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-relp-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-snmp-8.24.0-3.58.2 SUSE OpenStack Cloud 9:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-diag-tools-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-doc-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-gtls-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-mysql-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-relp-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-snmp-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 8:rsyslog-module-udpspoof-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-diag-tools-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-doc-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-gssapi-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-gtls-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-mmnormalize-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-mysql-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-pgsql-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-relp-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-snmp-8.24.0-3.58.2 SUSE OpenStack Cloud Crowbar 9:rsyslog-module-udpspoof-8.24.0-3.58.2 important 6.8 AV:N/AC:M/Au:N/C:P/I:P/A:P To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2022/suse-su-20222331-1/ https://www.suse.com/security/cve/CVE-2022-24903.html CVE-2022-24903 https://bugzilla.suse.com/1199061 SUSE Bug 1199061 https://bugzilla.suse.com/1201736 SUSE Bug 1201736 https://bugzilla.suse.com/1206201 SUSE Bug 1206201 https://bugzilla.suse.com/1225528 SUSE Bug 1225528 https://bugzilla.suse.com/1225631 SUSE Bug 1225631