Release date:
2026-10-06 09:01:32 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in RainerScript replace()
- debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the
full failed partial-match length in doFuncReplace() in
grammar/rainerscript.c, so the allocated result matches what the
copy pass writes
- debian/patches/CVE-2026-78002-tests.patch: add regression test
tests/rscript_replace-overlap.sh covering replace() with an
overlapping partial match (the overflow trigger)
- CVE-2026-78002
Updated packages:
-
rsyslog_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:70292f06ca45635222b152c1e7fa225cb54a1b16
-
rsyslog-czmq_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:184099df3e8cafc49174cda63ae80bd5b59570d4
-
rsyslog-elasticsearch_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:4cceecb95aa451e038dac4c47263c3c36ad62a85
-
rsyslog-gnutls_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:caa0c075e25cb631d4e5979c0042b0c91d5ba0a4
-
rsyslog-gssapi_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:7634baa7cb76aec05eb44127d75e5e44997503d6
-
rsyslog-hiredis_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:ddec7cf3565cec7b0dd0d25cd43efbad076e1a01
-
rsyslog-kafka_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:b146acfe01f08b919316346886a6307c0363572f
-
rsyslog-mongodb_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:2d39a43fcbfa82a244e13e714c7b090a372c4dcd
-
rsyslog-mysql_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:cbf2250cf54d64aaa43f3433e757469f80394774
-
rsyslog-pgsql_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:db6242a13f997ddc5554ddf63aae60eef05d35ff
-
rsyslog-relp_8.32.0-1ubuntu4.2+tuxcare.els1_amd64.deb
sha:5f64429bbaf7f67e665b4253f58519a12e1854b8
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
