{"id":"CLSA-2026-1792399166","summary":"Fix CVE(s): CVE-2026-78002","details":"   * SECURITY UPDATE: Heap buffer overflow in RainerScript replace()\n     - debian/patches/CVE-2026-78002.patch: rewind the replace() sizing pass\n       by the full failed partial-match length so the allocated buffer\n       matches what the copy pass writes, and add a regression test\n     - debian/rules: make the new regression test executable before\n       running the testsuite\n     - CVE-2026-78002","modified":"2026-10-26T09:31:53.385748552Z","published":"2026-10-19T08:39:37Z","upstream":["CVE-2026-78002"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1792399166.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-78002"}],"affected":[{"package":{"name":"rsyslog","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-czmq","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-czmq?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-elasticsearch","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-elasticsearch?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-gnutls","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-gnutls?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-gssapi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-gssapi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-hiredis","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-hiredis?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-kafka","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-kafka?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-mongodb","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-mongodb?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}},{"package":{"name":"rsyslog-relp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-relp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els2"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1792399166.json"}}],"schema_version":"1.9.0"}