Package: rsyslog
Version: 8.2102.0-2
Severity: important
Tags: upstream, fixed-upstream
Control: forwarded -1 https://github.com/rsyslog/rsyslog/issues/4725

Dear rsyslog maintainers,

the mmanon plugin in rsyslog fails to anonymize IPv6 addresses if they have a
port appended without braces (e.g. 1234:5678:90ab:cdef:1234:5678:90ab:cdef:80).

This bug has already been reported[1] and fixed[2] upstream.

[1] https://github.com/rsyslog/rsyslog/issues/4725
[2] https://github.com/rsyslog/rsyslog/pull/4735

Since this bug has privacy/security implications, I wonder whether it would
warrant an upload to bullseye-security or bullseye-updates.

Cheers
Jonas

Reply via email to