#1151094 rsyslog: GHSA-48f2-29wv-5jgc: Exotic RainerScript replace() 32-bit output-length wrap causes a heap buffer overflow

Package:
src:rsyslog
Source:
src:rsyslog
Submitter:
Salvatore Bonaccorso
Date:
2026-10-17 05:53:02 UTC
Severity:
normal
Tags:
#1151094#5
Date:
2026-10-17 05:51:48 UTC
From:
To:
Hi

See: https://www.openwall.com/lists/oss-security/2026/10/13/12 and
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-48f2-29wv-5jgc
.

As this has negligible security impact we marked it unimportant, so it
can as well just be closed once a new upload contains the fix
https://github.com/rsyslog/rsyslog/commit/0a6901dd6f4f3e6c99097179f1cfeb8e1820bcdc
from upstream. For stable you might pick a fix a point release when
doing other updates as well.

So far no CVE was assigned.

Regards,
Salvatore