SUSE-SU-2023:0319-1

Details

Description of the patch:

This update for syslog-ng fixes the following issues:

CVE-2022-38725: Fixed an integer overflow in the RFC3164 protocol parser (bsc#1207460).

Affected Packages

syslog-ng

SUSE Linux Enterprise High Performance Computing 12SUSE Linux Enterprise Module for Legacy 12SUSE Linux Enterprise Server 12SUSE Linux Enterprise Server 12 SP3SUSE Linux Enterprise Server 12 SP4

Fixed in:

3.6.4-12.11.1

References

ADVISORY

https://bugzilla.suse.com/1207460

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2023-February/013705.html

ADVISORY

https://www.suse.com/security/cve/CVE-2022-38725/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230319-1/