CLSA-2026-1791277470

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791277470
Upstream
  • CVE-2026-78002
Published
2026-10-06T09:04:40Z
Modified
2026-10-26T09:32:02Z
Summary
Fix CVE(s): CVE-2026-78002
Details
  • SECURITY UPDATE: Heap buffer overflow in RainerScript replace()
    • debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace() in grammar/rainerscript.c, so the allocated result matches what the copy pass writes
    • debian/patches/CVE-2026-78002-tests.patch: add regression test tests/rscript_replace-overlap.sh covering replace() with an overlapping partial match (the overflow trigger)
    • CVE-2026-78002
References

Affected packages

TuxCare:Ubuntu:16.04
rsyslog

Package

Name
rsyslog
Purl
pkg:deb/tuxcare/rsyslog?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-elasticsearch

Package

Name
rsyslog-elasticsearch
Purl
pkg:deb/tuxcare/rsyslog-elasticsearch?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-gnutls

Package

Name
rsyslog-gnutls
Purl
pkg:deb/tuxcare/rsyslog-gnutls?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-gssapi

Package

Name
rsyslog-gssapi
Purl
pkg:deb/tuxcare/rsyslog-gssapi?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-mysql

Package

Name
rsyslog-mysql
Purl
pkg:deb/tuxcare/rsyslog-mysql?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-pgsql

Package

Name
rsyslog-pgsql
Purl
pkg:deb/tuxcare/rsyslog-pgsql?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"
rsyslog-relp

Package

Name
rsyslog-relp
Purl
pkg:deb/tuxcare/rsyslog-relp?distro=ubuntu-16.04

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.16.0-1ubuntu3.1+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/ubuntu16.04els/CLSA-2026-1791277470.json"