Upstream information
Description
The ACL handling in rsyslog 3.12.1 to 3.20.0, 4.1.0, and 4.1.1 does not follow $AllowedSender directive, which allows remote attackers to bypass intended access restrictions and spoof log messages or create a large number of spurious messages.Novell/SUSE information
Novell Bugzilla entry: 457273 SUSE Security Advisories:- SUSE-SR:2009:001, published Mon, 12 Jan 2009 13:00:00 +0000
List of released packages
| Product(s) | Fixed package version(s) | References |
|---|