Tlog Bug Fix and Enhancement Update - ALBA-2022:2139
Summary
ALBA-2022:2139: tlog bug fix and enhancement update. Affects tlog versions < 12.1-1.el8_6. Fixed in 12.1-1.el8_6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Tlog is a terminal I/O recording program used as a replacement for a user's shell. It starts recording the I/O and then executes the user's shell. The recorded I/O can be forwarded to a logging server in JSON format.
Vulnerability Detail
The vulnerability in Tlog (ALBA-2022:2139) caused SSH to not reliably run commands. This issue impacted the functionality of SSH and could lead to unreliable command execution.
How To Fix
Minimum fixed version
12.1-1.el8_6
This is the first release that contains the fix.
sudo dnf update tlog
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Conclusion
The Tlog bug fix and enhancement update (ALBA-2022:2139) resolves the issue with SSH command execution. It is recommended to update the Tlog package to version 12.1-1.el8_6 or later to fix this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for tlog →
FAQ
Tlog is a terminal I/O recording program used to record and forward I/O in JSON format.
The vulnerability caused SSH to not reliably run commands, leading to unreliable command execution.
Update the Tlog package to version 12.1-1.el8_6 or later.
No specific workarounds have been mentioned for this vulnerability.
You can find more information about this vulnerability in the AlmaLinux advisory ALBA-2022:2139.
References
Related vulnerabilities
Recent vulnerabilities recorded for tlog.