Issued:: 2023-11-14
Updated:: 2023-11-14

Synopsis

logwatch bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for logwatch is now available for Red Hat Enterprise Linux 8.

Description

For detailed information on changes in this release, see the Red Hat Enterprise Linux 8.9 Release Notes linked from the References section.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10 x86_64
Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10 aarch64
Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10 ppc64le
Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10 s390x

Fixes

BZ - 2043044 - logwatch pam_unix service should ignore normal systemd-user messages
BZ - 2043088 - logwatch for sshd should recognize "Disconnected from authenticating user" failed logins
BZ - 2043109 - systemd noise that logwatch needs to filter
BZ - 2043942 - A couple normal startup messages from auditd that logwatch should ignore
BZ - 2043944 - logwatch for fail2ban should ignore "Server ready" startup message
BZ - 2043946 - logwatch for kernel should not treat "RAS: Correctable Errors collector initialized" message as an error
BZ - 2043951 - logwatch "secure" service should ignore sudo messages since they're audited separately by the "sudo" service
BZ - 2043952 - logwatch "secure" service should ignore harmless polkitd startup messages
BZ - 2044101 - logwatch sshd report should sort failed logins and illegal users by count, not IP address
BZ - 2046459 - sendmail logwatch script needs to cope with the fact that PIDs can have six digits now

CVEs

(none)

References

https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.9_release_notes/index

Red Hat Enterprise Linux for x86_64 8

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
x86_64
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
s390x
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for Power, little endian 8

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
ppc64le
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for ARM 64 8

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
aarch64
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for x86_64 - Extended Life Cycle 8.10

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
x86_64
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for ARM 64 - Extended Life Cycle 8.10

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
aarch64
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for Power, little endian - Extended Life Cycle 8.10

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
ppc64le
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

Red Hat Enterprise Linux for IBM z Systems - Extended Life Cycle 8.10

SRPM
logwatch-7.4.3-21.el8.src.rpm	SHA-256: fd8aa8f17ad3c91086732c8da13a75838585f675d222bdd255c247f06ec8b12d
s390x
logwatch-7.4.3-21.el8.noarch.rpm	SHA-256: fd30de96d929f2dd32e86caee3a80d9077236e2b1cbdd976601c57751d68648d

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.

Utilities

Infrastructure and Management

Cloud Computing

Storage

Runtimes

Integration and Automation