openSUSE-SU-2026:22184-1

openSUSE-SU-2026:22184-1 · Security update for rsyslog

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Esta página muestra una selección de datos de las fuentes. Consulte los avisos enlazados para ver la descripción completa y las versiones afectadas.

This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910). - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926). - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). - RainerScript replace() length wrap (bsc#1285036). Changes for rsyslog: - added new rsyslog (imdtls/omdtls) DTLS modules (jsc#PED-16623) - upgrade to rsyslog 8.2608.0 (bsc#1257604) * 2026-08-18: imbeats: rearm listener after failed TLS accept * 2026-08-18: msg: serialize turbo snapshot duplication * 2026-08-18: omfile: harden dynafile default containment * 2026-08-18: fixup! omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-02: omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-21: mmkubernetes: reload SA token proactively and on HTTP 401 * 2026-08-17: devtools: remove Cubic from local validation * 2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount * 2026-08-11: tcpsrv: synchronize session table slots * 2026-08-11: imrelp: preserve errno across stop signal * 2026-08-12: examples.rst: Missing space in template * 2026-08-10: mmnormalize: merge debug metadata * 2026-08-08: normalizers: complete debug test gating * 2026-08-08: normalizers: complete debug integration * 2026-08-07: mmnormalize, pmnormalize: add liblognorm debugging * 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead of crashing * 2026-08-07: runtime: make error-message flag atomic * 2026-07-24: fuzz: exercise RFC 3164 and RFC 5424 parsers * 2026-08-05: build: unify indentation in AC_CONFIG_FILES list * 2026-07-25: imfile: fix delay.message microsecond conversion * 2026-07-24: diskqueue: reject symlinked persisted segments * 2026-06-23: omfile: control symlink following * 2026-07-25: mmnormalize: make HUP reload worker-safe * 2026-07-24: docs(agents): add Cursor Cloud environment setup notes * 2026-07-22: imbeats: harden Lumberjack input resource handling * 2026-07-23: stringbuf: harden empty string replacement * 2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654 bsc#1271910) * 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the done: label * 2026-07-21: queue: preserve DA child work during shutdown * 2026-07-21: imtcp: release completed zlib decoder state * 2026-07-09: doc: clarify JSON array rendering * 2026-07-21: Potential fixes for 5 code quality findings (#7397) * 2026-07-20: ratelimit: optimize port-based per-source keys * 2026-07-20: imtcp: make zstd window budget configurable * 2026-07-19: imtcp: use snake case for zstd window tracking * 2026-07-17: imtcp: bound aggregate zstd decoder window memory * 2026-07-20: statsobj: guard Prometheus escape writes * 2026-07-18: config: do not instantiate actions disabled via config.enabled="off" * 2026-07-15: queue: document DA engine internals * 2026-07-14: msg: enforce source-property helper contract * 2026-07-10: ratelimit: remove per-source key policy hot lock * 2026-07-08: ratelimit: speed source-key shortcuts * 2026-07-15: queue: clarify DA transfer worker role * 2026-07-18: compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback * 2026-07-18: rainerscript: warn on constant AND/OR operand at parse time * 2026-07-18: configure: include <stddef.h> in the STAILQ detection test * 2026-07-17: mmnormalize: share Turbo CEE root path check * 2026-07-17: mmnormalize: fall back after Turbo materialization failure * 2026-07-17: mmnormalize: preserve turbo results across message boundaries * 2026-07-17: benchmarks: harden comparison and helper inputs * 2026-07-16: segdisk: optimize CRC accounting and add benchmarks * 2026-07-15: imjournal: stop invalidation reopen busy-loop * 2026-07-14: queue: harden segmented DA lifecycle invariants * 2026-07-14: queue: harden DA portability and startup cleanup * 2026-07-14: queue: address segmented DA review findings * 2026-07-14: queue: stabilize DA shutdown and reload state * 2026-07-14: queue: clarify lazy marker and legacy state paths * 2026-07-14: queue: gate idle cleanup on durable intent * 2026-07-14: queue: document empty DA marker replacement * 2026-07-14: queue: preserve classic state on transient load errors * 2026-07-14: queue: make idle cleanup restoration crash safe * 2026-07-14: queue: fail classic DA startup on real errors * 2026-07-14: queue: clarify dirty DA configuration handling * 2026-07-14: queue: separate DA idle and worker timeouts * 2026-07-14: queue: document DA auto-upgrade boundary * 2026-07-14: queue: publish fresh DA markers on first spill * 2026-07-14: queue: constrain classic DA startup fallback * 2026-07-14: queue: clarify disabled DA idle timeout * 2026-07-14: queue: preserve classic DA startup fallback * 2026-07-14: doc: describe segmented disk-assisted queues * 2026-07-14: queue: add segmented disk-assisted engine * 2026-07-14: queue: retain adopted recovery frontier * 2026-07-14: queue: address segmented disk review findings * 2026-07-13: queue: wake workers before capacity waits * 2026-07-13: queue: make segmented deletion resumable * 2026-07-13: queue: initialize missing state in empty spool dirs * 2026-07-13: queue: reject invalid segmented codec field types * 2026-07-13: queue: avoid sanitized generation wrap * 2026-07-13: queue: expose segmented disk durability test hooks * 2026-07-13: queue: make segmented disk recovery lazy * 2026-07-09: queue: rework experimental segmented disk backend * 2026-07-08: imjournal: warn when failing to get the MESSAGE field * 2026-07-08: omawslogshlc: add CloudWatch Logs HLC output module * 2026-07-08: core: add systemd READY delay opt-in * 2026-06-02: core/imfile: synchronize sd_notify READY=1 with module startup * 2026-07-07: ratelimit: shard per-source state * 2026-07-06: docs: validate marked config samples * 2026-07-07: ratelimit: shard named config registry * 2026-07-06: runtime: harden ratelimit per-source reload * 2026-07-06: queue: align legacy action batch default * 2026-07-06: runtime: relax worker-count log reads * 2026-07-06: core: relax selected atomic flag reads * 2026-07-06: omkafka: relax poll stop flag atomics * 2026-07-06: doc: add documentation for imfile delay.message parameter * 2026-06-04: core: add generic output rate limiting * 2026-07-05: omelasticsearch: apply TLS options during detection * 2026-06-24: omprog: pace transaction retry resumes * 2026-07-02: runtime: add relaxed 32-bit atomic helpers * 2026-07-02: runtime: fix uint64 atomic fallback return * 2026-07-02: net: match legacy allowed sender hostname handling * 2026-07-02: runtime: modernize atomic helper usage * 2026-07-02: net: add modern allowedSender ACLs * 2026-07-02: queue: keep DA child workers alive while idle * 2026-07-01: runtime: add atomic read load helpers * 2026-07-01: rainerscript: align hex escape lexer states * 2026-06-30: rainerscript: accept hex object string escapes * 2026-06-30: runtime: synchronize action retry shutdown state * 2026-06-30: mmutf8fix: fix replacement sequence examples * 2026-06-16: parser: preserve first sanitize offset with SpaceLF * 2026-06-29: template: avoid new legacy octal escape * 2026-06-29: Make imptcp-epoll-add-failure.sh Linux-only * 2026-06-29: Use check_LTLIBRARIES to generate liboverride_* test libraries * 2026-06-29: doc: correct tcp_user_timeout version marker * 2026-06-23: omhttp: continue after permanent data failures * 2026-06-28: ommail: harden subject template header output * 2026-06-28: omprog/omstdout: guard empty template LF checks * 2026-06-23: tcp: skip legacy z after stream decode * 2026-06-26: omelasticsearch: escape bulk metadata values * 2026-06-24: imtcp: bound zstd dec

Corrección disponible

Publicación

2026-10-29T14:56:47Z

Actualización

2026-10-31T18:00:09.594047674Z

Pila tecnológica: system

Comprueba tu servidor →