Wind River Support Network

HomeDefectsLIN1023-12920
Fixed

LIN1023-12920 : Security Advisory - syslog-ng - CVE-2024-47619

Created: May 9, 2025    Updated: Jul 21, 2025
Resolved Date: Jul 20, 2025
Found In Version: 10.23.30.1
Fix Version: 10.23.30.18
Severity: Standard
Applicable for: Wind River Linux LTS 23
Component/s: Userspace

Description

syslog-ng is an enhanced log daemo. Prior to version 4.8.2, `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Version 4.8.2 contains a fix for the issue.

CREATE(Triage):(User=admin) CVE-2024-47619 (https://nvd.nist.gov/vuln/detail/CVE-2024-47619)

CVEs

  • Linkedin
  • Facebook
  • Twitter
  • Youtube