Synopsis

Critical: librelp security update

Type/Severity

Security Advisory: Critical

Topic

An update for librelp is now available for Red Hat Enterprise Linux 6.7 Extended Update Support.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

Librelp is an easy-to-use library for the Reliable Event Logging Protocol (RELP) protocol. RELP is a general-purpose, extensible logging protocol.

Security Fix(es):

• librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c (CVE-2018-1000140)
  

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank Rainer Gerhards (rsyslog) for reporting this issue. Upstream acknowledges Bas van Schaik (lgtm.com / Semmle) and Kevin Backhouse (lgtm.com / Semmle) as the original reporters.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - Extended Update Support 6.7 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support 6.7 i386
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7 s390x
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7 ppc64
• Red Hat Enterprise Linux EUS Compute Node 6.7 x86_64

Fixes

• BZ - 1560084 - CVE-2018-1000140 librelp: Stack-based buffer overflow in relpTcpChkPeerName function in src/tcp.c

CVEs

• CVE-2018-1000140

References

• https://access.redhat.com/security/updates/classification/#critical

Red Hat Enterprise Linux Server - Extended Update Support 6.7

SRPM
librelp-1.2.7-3.el6_7.1.src.rpm	SHA-256: d29946a8ecb78ce44f52011dec76e7a5544ce416ba0311e85ad8dccbd136608c
x86_64
librelp-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 476f8c71ef23f4b514a1903103000251bc88206187b42d8997df41b99657b290
librelp-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 6a346151b069afa71431ced05641ae200067b2c5922f7c189be7fa20fb3e26ca
librelp-debuginfo-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 48807c529e4d9dc1761886ab56062407523f9e15ffa68f93cf34639432884077
librelp-debuginfo-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 11186eba8ff281e64b925b47837a591c026eaaca9d5168e9755187db13f7720f
librelp-debuginfo-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 11186eba8ff281e64b925b47837a591c026eaaca9d5168e9755187db13f7720f
librelp-devel-1.2.7-3.el6_7.1.i686.rpm	SHA-256: d76ba3f3ae17b3e90fb2da7746584bc1ff0ea0d74092e5ee1085294780897af1
librelp-devel-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 5bb7144e7a2edb8cb2f0aa97129a68c336d9ab15ff1052961ae10df64fb1e1b0
i386
librelp-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 476f8c71ef23f4b514a1903103000251bc88206187b42d8997df41b99657b290
librelp-debuginfo-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 48807c529e4d9dc1761886ab56062407523f9e15ffa68f93cf34639432884077
librelp-debuginfo-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 48807c529e4d9dc1761886ab56062407523f9e15ffa68f93cf34639432884077
librelp-devel-1.2.7-3.el6_7.1.i686.rpm	SHA-256: d76ba3f3ae17b3e90fb2da7746584bc1ff0ea0d74092e5ee1085294780897af1

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.7

SRPM
librelp-1.2.7-3.el6_7.1.src.rpm	SHA-256: d29946a8ecb78ce44f52011dec76e7a5544ce416ba0311e85ad8dccbd136608c
s390x
librelp-1.2.7-3.el6_7.1.s390.rpm	SHA-256: da13aaa9e1c487286f23f0f237ba04a7c224894602d8555b25dcbf1e3b5e9627
librelp-1.2.7-3.el6_7.1.s390x.rpm	SHA-256: 41848342500b4540d1d188f99b6dad69915a79f6a4037cca04dce6c31fe0715d
librelp-debuginfo-1.2.7-3.el6_7.1.s390.rpm	SHA-256: e91760143daa2b373e904ad4780e358819e48db1ed2dcbc53268f987e6b8aab9
librelp-debuginfo-1.2.7-3.el6_7.1.s390x.rpm	SHA-256: 77ff6a27ddfe0d9d94f89ff014bb2052d8214769086e9b27f10a0462fc06100f
librelp-debuginfo-1.2.7-3.el6_7.1.s390x.rpm	SHA-256: 77ff6a27ddfe0d9d94f89ff014bb2052d8214769086e9b27f10a0462fc06100f
librelp-devel-1.2.7-3.el6_7.1.s390.rpm	SHA-256: 2d2f45cf9a1070dbfa6b2a4f87ffbb7e4bcac6e5f92ff218f7f2e2357d3dad77
librelp-devel-1.2.7-3.el6_7.1.s390x.rpm	SHA-256: 2026c59f716896fb5c125f2e17c2ee4edeea9f21e95be2a10f0edb3c09f2dc45

Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.7

SRPM
librelp-1.2.7-3.el6_7.1.src.rpm	SHA-256: d29946a8ecb78ce44f52011dec76e7a5544ce416ba0311e85ad8dccbd136608c
ppc64
librelp-1.2.7-3.el6_7.1.ppc.rpm	SHA-256: c3045b7c0e9f3cbf39741fa11238376165d8d440981d2c0a817c82b3bc60871c
librelp-1.2.7-3.el6_7.1.ppc64.rpm	SHA-256: 8556425066c70ea1ef013acf7c691240525a92660592ed10a4f941b9db13e37f
librelp-debuginfo-1.2.7-3.el6_7.1.ppc.rpm	SHA-256: 9621f41ab24f579a47b99bd84be3bbfa6da578feca4d745d94f8c1cecb0791fb
librelp-debuginfo-1.2.7-3.el6_7.1.ppc64.rpm	SHA-256: 3234fee3e84f9a5f357f9b39694e2d667903e73efb988d1bbbf0f7ce4cf45945
librelp-debuginfo-1.2.7-3.el6_7.1.ppc64.rpm	SHA-256: 3234fee3e84f9a5f357f9b39694e2d667903e73efb988d1bbbf0f7ce4cf45945
librelp-devel-1.2.7-3.el6_7.1.ppc.rpm	SHA-256: fe23ef61540ffa4aded9af2c4f67f1b8b014092064e0c3295117842dc8e88e5a
librelp-devel-1.2.7-3.el6_7.1.ppc64.rpm	SHA-256: ab247b7388bd951d7a4e81425332c6a1a10801bfc11be9b97cf201b05bafde96

Red Hat Enterprise Linux EUS Compute Node 6.7

SRPM
librelp-1.2.7-3.el6_7.1.src.rpm	SHA-256: d29946a8ecb78ce44f52011dec76e7a5544ce416ba0311e85ad8dccbd136608c
x86_64
librelp-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 476f8c71ef23f4b514a1903103000251bc88206187b42d8997df41b99657b290
librelp-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 6a346151b069afa71431ced05641ae200067b2c5922f7c189be7fa20fb3e26ca
librelp-debuginfo-1.2.7-3.el6_7.1.i686.rpm	SHA-256: 48807c529e4d9dc1761886ab56062407523f9e15ffa68f93cf34639432884077
librelp-debuginfo-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 11186eba8ff281e64b925b47837a591c026eaaca9d5168e9755187db13f7720f
librelp-debuginfo-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 11186eba8ff281e64b925b47837a591c026eaaca9d5168e9755187db13f7720f
librelp-devel-1.2.7-3.el6_7.1.i686.rpm	SHA-256: d76ba3f3ae17b3e90fb2da7746584bc1ff0ea0d74092e5ee1085294780897af1
librelp-devel-1.2.7-3.el6_7.1.x86_64.rpm	SHA-256: 5bb7144e7a2edb8cb2f0aa97129a68c336d9ab15ff1052961ae10df64fb1e1b0