SUSE-SU-2026:5089-1
- Source
- https://www.suse.com/support/update/announcement/2026/suse-su-20265089-1/
- Import Source
- https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2026:5089-1.json
- JSON Data
- https://api.osv.dev/v1/vulns/SUSE-SU-2026:5089-1
- Upstream
- Related
- Published
- 2026-11-03T15:24:54Z
- Modified
- 2026-11-04T14:15:13Z
- Summary
- Security update for rsyslog
- Details
-
This update for rsyslog fixes the following issues:
- CVE-2026-92709:
omfiledynaFiletemplate uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). - RainerScript replace() length wrap (bsc#1285036).
- CVE-2026-92709:
- References
Affected packages
SUSE:Linux Enterprise Server 12 SP5-LTSS / rsyslog
Package
- Name
- rsyslog
- Purl
- pkg:rpm/suse/rsyslog&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5-LTSS
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.2106.0-8.30.2
Ecosystem specific
{
"binaries": [
{
"rsyslog": "8.2106.0-8.30.2",
"rsyslog-diag-tools": "8.2106.0-8.30.2",
"rsyslog-doc": "8.2106.0-8.30.2",
"rsyslog-module-gssapi": "8.2106.0-8.30.2",
"rsyslog-module-gtls": "8.2106.0-8.30.2",
"rsyslog-module-mmnormalize": "8.2106.0-8.30.2",
"rsyslog-module-mysql": "8.2106.0-8.30.2",
"rsyslog-module-pgsql": "8.2106.0-8.30.2",
"rsyslog-module-relp": "8.2106.0-8.30.2",
"rsyslog-module-snmp": "8.2106.0-8.30.2",
"rsyslog-module-udpspoof": "8.2106.0-8.30.2"
}
]
}
SUSE:Linux Enterprise Server LTSS Extended Security 12 SP5 / rsyslog
Package
- Name
- rsyslog
- Purl
- pkg:rpm/suse/rsyslog&distro=SUSE%20Linux%20Enterprise%20Server%20LTSS%20Extended%20Security%2012%20SP5
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affectedFixed8.2106.0-8.30.2
Ecosystem specific
{
"binaries": [
{
"rsyslog": "8.2106.0-8.30.2",
"rsyslog-diag-tools": "8.2106.0-8.30.2",
"rsyslog-doc": "8.2106.0-8.30.2",
"rsyslog-module-gssapi": "8.2106.0-8.30.2",
"rsyslog-module-gtls": "8.2106.0-8.30.2",
"rsyslog-module-mmnormalize": "8.2106.0-8.30.2",
"rsyslog-module-mysql": "8.2106.0-8.30.2",
"rsyslog-module-pgsql": "8.2106.0-8.30.2",
"rsyslog-module-relp": "8.2106.0-8.30.2",
"rsyslog-module-snmp": "8.2106.0-8.30.2",
"rsyslog-module-udpspoof": "8.2106.0-8.30.2"
}
]
}