This update for rsyslog fixes the following issues:
- CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910).
- CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414).
- CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926).
- CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without
explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926).
- RainerScript replace() length wrap (bsc#1285036).
Changes for rsyslog:
- added new rsyslog (imdtls/omdtls) DTLS modules (js
This update for rsyslog fixes the following issues:
- CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414).
- input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).
Changes for rsyslog:
- added a devel subpackage, with requires (bsc#1264721)