RHBA-2023:7180 - Bug Fix Advisory

Topic

An update for logwatch is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64

Fixes

• BZ - 2043044 - logwatch pam_unix service should ignore normal systemd-user messages
• BZ - 2043088 - logwatch for sshd should recognize "Disconnected from authenticating user" failed logins
• BZ - 2043109 - systemd noise that logwatch needs to filter
• BZ - 2043942 - A couple normal startup messages from auditd that logwatch should ignore
• BZ - 2043944 - logwatch for fail2ban should ignore "Server ready" startup message
• BZ - 2043946 - logwatch for kernel should not treat "RAS: Correctable Errors collector initialized" message as an error
• BZ - 2043951 - logwatch "secure" service should ignore sudo messages since they're audited separately by the "sudo" service
• BZ - 2043952 - logwatch "secure" service should ignore harmless polkitd startup messages
• BZ - 2044101 - logwatch sshd report should sort failed logins and illegal users by count, not IP address
• BZ - 2046459 - sendmail logwatch script needs to cope with the fact that PIDs can have six digits now

CVEs

(none)

References

• https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index