Release date:
2026-10-06 09:04:40 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in RainerScript replace()
- debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the
full failed partial-match length in doFuncReplace() in
grammar/rainerscript.c, so the allocated result matches what the
copy pass writes
- debian/patches/CVE-2026-78002-tests.patch: add regression test
tests/rscript_replace-overlap.sh covering replace() with an
overlapping partial match (the overflow trigger)
- CVE-2026-78002
Updated packages:
-
rsyslog_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:ce5c28cfa6221d14cfdf8a90dc06b5c47e490f93
-
rsyslog-elasticsearch_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:c20a8f0753bf371457dca9cc8194ed7af3ab9210
-
rsyslog-gnutls_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:213c38570ba67905f525b7400b389689b75e55b9
-
rsyslog-gssapi_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:6e73b89e8d994a4a1e6a308ba6e56e250ad71dfb
-
rsyslog-mysql_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:befe7ebfb517c13d7a32e60e9cc36f5a79d10bff
-
rsyslog-pgsql_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:0b8c0858013505b13288e5bc69d938fb9433c60d
-
rsyslog-relp_8.16.0-1ubuntu3.1+tuxcare.els3_amd64.deb
sha:d7e5dfe049204d244aad7edc72bb5d4dd1062287
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
