Issued:

2013-02-20

Updated:

2013-02-20

RHBA-2013:0450 - rsyslog bug fix update

Synopsis

rsyslog bug fix update

Type/Severity

Bug Fix Advisory (none)

Topic

Updated rsyslog packages that fix three bugs are now available for Red Hat Enterprise Linux 6.

Description

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. Rsyslog supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control.

This update fixes the following bugs:

• Prior to this update, the rsyslog packages depended on a newer selinux-policy which the rsyslog spec file did not reflect. The command "yum --security update" updated rsyslog but not the selinux-policy. As a consequence, rsyslog malfunctioned when booting and depending services failed, including login. This update modifies the spec file to prevent installation with an incompatible selinux-policy package and enforce its update if available. (BZ#838148)

• Prior to this update, the rule that was specified immediately before the "$IncludeConfig" directive to be reordered after the contents of the included configuration file due to handling problem with the configuration file parser. As a consequence, the order of processing was different from the intended one with the potential of message losses. This update modifies the underlying code so that the order of processing is the same as in the configuration file. (BZ#847568)

• Prior to this update, the Unix Socket Input plug-in for rsyslog did not consider the timestamp format specified by the RFC 5424 Syslog Protocol for timestamps derived from RFC 3339. As a consequence, messages sent to the syslog daemon via Unix sockets that used the RFC 3339-derived timestamp format were silently discarded. This update supports this timestamp format. Messages sent to the rsyslog system logging daemon via Unix sockets that use the RFC 3339-derived timestamp format are now accepted and processed properly. (BZ#886004)

All rsyslog users are advised to upgrade to these updated packages, which fix these bugs.

Solution

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258

Affected Products

Updated Packages

• rsyslog-5.8.10-6.el6.src.rpm
• rsyslog-snmp-5.8.10-6.el6.ppc64.rpm
• rsyslog-pgsql-5.8.10-6.el6.s390x.rpm
• rsyslog-debuginfo-5.8.10-6.el6.x86_64.rpm
• rsyslog-relp-5.8.10-6.el6.x86_64.rpm
• rsyslog-gssapi-5.8.10-6.el6.x86_64.rpm
• rsyslog-5.8.10-6.el6.ppc64.rpm
• rsyslog-gnutls-5.8.10-6.el6.s390x.rpm
• rsyslog-gssapi-5.8.10-6.el6.i686.rpm
• rsyslog-debuginfo-5.8.10-6.el6.ppc64.rpm
• rsyslog-gnutls-5.8.10-6.el6.i686.rpm
• rsyslog-5.8.10-6.el6.s390x.rpm
• rsyslog-relp-5.8.10-6.el6.s390x.rpm
• rsyslog-mysql-5.8.10-6.el6.i686.rpm
• rsyslog-mysql-5.8.10-6.el6.ppc64.rpm
• rsyslog-5.8.10-6.el6.i686.rpm
• rsyslog-pgsql-5.8.10-6.el6.ppc64.rpm
• rsyslog-snmp-5.8.10-6.el6.i686.rpm
• rsyslog-debuginfo-5.8.10-6.el6.s390x.rpm
• rsyslog-debuginfo-5.8.10-6.el6.i686.rpm
• rsyslog-gnutls-5.8.10-6.el6.x86_64.rpm
• rsyslog-gssapi-5.8.10-6.el6.ppc64.rpm
• rsyslog-snmp-5.8.10-6.el6.s390x.rpm
• rsyslog-pgsql-5.8.10-6.el6.i686.rpm
• rsyslog-gssapi-5.8.10-6.el6.s390x.rpm
• rsyslog-mysql-5.8.10-6.el6.s390x.rpm
• rsyslog-relp-5.8.10-6.el6.i686.rpm
• rsyslog-relp-5.8.10-6.el6.ppc64.rpm
• rsyslog-gnutls-5.8.10-6.el6.ppc64.rpm
• rsyslog-snmp-5.8.10-6.el6.x86_64.rpm
• rsyslog-mysql-5.8.10-6.el6.x86_64.rpm
• rsyslog-5.8.10-6.el6.x86_64.rpm
• rsyslog-pgsql-5.8.10-6.el6.x86_64.rpm

Fixes

• This content is not included.BZ - 847568

CVEs

(none)

References

(none)

Additional information

• The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
• Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.