Thomas Perale 86cc919652 package/rsyslog: upstream patch CVE-2026-19654 ...

- CVE-2026-19654:
    A unauthenticated remote peer may lead rsyslogd to crash due to a flaw
    in the optional imptcp module. A crafted input sequence during
    oversize-frame recovery can cause an invalid internal message length
    and terminate rsyslogd. No confidentiality or integrity impact,
    privilege escalation, or code execution has been identified. imtcp and
    the default imptcp framing modes are not affected.

For more information, see:
  - https://www.cve.org/CVERecord?id=CVE-2026-19654
  - 07b3c40a5a

Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 52ae04257a)
[raphael: backport patch for rsyslog 8.2412.0]
Signed-off-by: Raphaël Mélotte <raphael.melotte@mind.be>

2026-09-04 13:05:08 +02:00

..

0001-imptcp-guard-regex-framing-match-at-line-start.patch

…

Config.in

…

rsyslog.hash

…

rsyslog.mk

…

rsyslog.service

…

S01rsyslogd

…