[CLSA-2026:1791371082] Fix CVE(s): CVE-2026-78002
Type:
security
Severity:
Important
Release date:
2026-10-07 11:04:56 UTC
Description:
* SECURITY UPDATE: Heap buffer overflow in RainerScript replace() - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace() in grammar/rainerscript.c, so the allocated result matches what the copy pass writes - debian/patches/CVE-2026-78002-tests.patch: add regression test tests/rscript_replace-overlap.sh covering replace() with an overlapping partial match (the overflow trigger) - CVE-2026-78002
CVEs fixed:
Updated packages:
  • rsyslog_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:fb331e6d60eead22e0f3430fe4b29838433687c1
  • rsyslog-czmq_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:1b7f8b394744d1252185e01e5131b90f772147b2
  • rsyslog-elasticsearch_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:22cab0e947832aae7a9bced7334e5936cabd1824
  • rsyslog-gnutls_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:fa0293f05139164dff2585d2676eae9f5b154daa
  • rsyslog-gssapi_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:e7ab2ea9de2fe35c77f0196d586156b3c92da5ed
  • rsyslog-hiredis_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:d2affb3d12e42c9aad026559019e1696204319cb
  • rsyslog-kafka_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:0a0fec5e29b81fd017d3eab7d6535e9325eb01a4
  • rsyslog-mongodb_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:7350053a22bbf573cab4f7251eb2ab039c2b1fa8
  • rsyslog-mysql_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:745386d5852944d1f4460635d810b572fc8cd013
  • rsyslog-openssl_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:7e6d1b5621b75310db9e91b423829538c5b07b2f
  • rsyslog-pgsql_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:ea16cfd804425f80ff3379c0d1f8915db66a2062
  • rsyslog-relp_8.2001.0-1ubuntu1.3+tuxcare.els2_amd64.deb
    sha:030fc0f75087ff76dd1d01835a17f4060f91c3d2
  • rsyslog_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:45459946e3ddcbd6712619db5e5d42b7734b4ca3
  • rsyslog-czmq_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:6f34717bc1c59bea886285fffe48e80546396174
  • rsyslog-elasticsearch_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:f34751eac2813e23e10d3edabde0b098afe6e84a
  • rsyslog-gnutls_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:e68ec4b980bfa8eeb1c49484c52a8bba92d142e6
  • rsyslog-gssapi_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:ef9e1f6294263319968da81d9e5c9240f1f2d72b
  • rsyslog-hiredis_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:87b63d2512db4f081b3832614a8b25b87e0df4fa
  • rsyslog-kafka_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:5be13cf996a12a9a633e39d47063f159abeff30e
  • rsyslog-mongodb_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:e24b5cc1eb8ad7a8345928e91fa0ce2a9e096c7d
  • rsyslog-mysql_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:818f274a7b90fb7a9a9a7accaa8053fbbce20431
  • rsyslog-openssl_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:0b32be099b7ede5a474e3dc52f7837f1c46d0aaf
  • rsyslog-pgsql_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:629f5ceff403f9b219c91427112d538be63b91df
  • rsyslog-relp_8.2001.0-1ubuntu1.3+tuxcare.els2_arm64.deb
    sha:2a8b027e7c5e4020291faeaed72c71973ac078d5
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.