security

Today, we release rsyslog 8.2204.1.  This is a security bugfixing release. There is heap buffer overflow vulnerability in rsyslog tcp reception components, most notably imtcp and imptcp. This can only happen in octet-counted mode, which is enabled by default. If the receiver ports are exposed to the public Internet AND are used without authentication, this […]