This update for rsyslog fixes the following issues:
omfile dynaFile template uses a value influenced by untrusted input as a path component without
explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926).{
"binaries": [
{
"rsyslog": "8.2406.0-150600.12.30.1",
"rsyslog-module-gssapi": "8.2406.0-150600.12.30.1",
"rsyslog-module-gtls": "8.2406.0-150600.12.30.1",
"rsyslog-module-mmnormalize": "8.2406.0-150600.12.30.1",
"rsyslog-module-mysql": "8.2406.0-150600.12.30.1",
"rsyslog-module-ossl": "8.2406.0-150600.12.30.1",
"rsyslog-module-pgsql": "8.2406.0-150600.12.30.1",
"rsyslog-module-relp": "8.2406.0-150600.12.30.1",
"rsyslog-module-snmp": "8.2406.0-150600.12.30.1",
"rsyslog-module-udpspoof": "8.2406.0-150600.12.30.1"
}
]
}
{
"binaries": [
{
"rsyslog": "8.2406.0-150600.12.30.1",
"rsyslog-module-gssapi": "8.2406.0-150600.12.30.1",
"rsyslog-module-gtls": "8.2406.0-150600.12.30.1",
"rsyslog-module-mmnormalize": "8.2406.0-150600.12.30.1",
"rsyslog-module-mysql": "8.2406.0-150600.12.30.1",
"rsyslog-module-ossl": "8.2406.0-150600.12.30.1",
"rsyslog-module-pgsql": "8.2406.0-150600.12.30.1",
"rsyslog-module-relp": "8.2406.0-150600.12.30.1",
"rsyslog-module-snmp": "8.2406.0-150600.12.30.1",
"rsyslog-module-udpspoof": "8.2406.0-150600.12.30.1"
}
]
}