Summary
[8.2510.0-2.0.1.el9_8.2]
- Fixes rsyslog segfault during shutdown when relp is configured with TLS [Orabug: 37588023]
[8.2510.0-2.2]
- Fix CVE-2026-78002: heap buffer overflow in RainerScript replace() function
Resolves: RHEL-246641
[8.2510.0-2.1]
- Backport: imptcp: guard regex-framing match against iCurrLine == 0
Resolves: RHEL-212699
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | rsyslog | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-crypto | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-doc | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-elasticsearch | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-gnutls | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-gssapi | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-kafka | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-logrotate | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmaudit | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmfields | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmjsonparse | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmkubernetes | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmnormalize | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mmsnmptrapd | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-mysql | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-omamqp1 | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-openssl | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-pgsql | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-relp | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-snmp | 0:8.2510.0-2.0.1.el9_8.2 |
| Oracle Linux · 9 | rsyslog-udpspoof | 0:8.2510.0-2.0.1.el9_8.2 |
Vulnerabilities 1
-
High 7.5
Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation durin…