Security Issue

logcheck may cause a security issue which leaks restricted dmesg information.

v0.13 adds more suppression rules for kernel dmesg outputs.

Mitigation

Please update our ignore database ASAP, if you are using.

0. Minimize the system.
   • If possible, purge development tool chains.
1. Do not add daily normal users into logcheck recipient lists.
   • Especially do exclude developer accounts.
2. Restrict web access.
   • Never execute anything from the Internet directly.
   • Use browser tracking protections as much as possible.
3. Create special (but normal) user to receive those logcheck summary mails.
   • who does nothing but to read summary mails.
4. Use buster (Linux Kernel 4.19)
   • Or use backported 4.19 kernel for stretch.
   • Linux Kernel 4.15-rc1 addressed this issue.

Download

The tar file is available at the software page.