openSUSE-SU-2026:21535-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21535-1.json
JSON Data
https://api.osv.dev/v1/vulns/openSUSE-SU-2026:21535-1
Upstream
Related
Published
2026-08-05T09:10:15Z
Modified
2026-08-06T18:23:57Z
Summary
Security update for rsyslog
Details

This update for rsyslog fixes the following issues:

  • CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414).
  • input sequence during oversize-frame recovery in imptcp can cause denial of service (bsc#1271910).

Changes for rsyslog:

  • added a devel subpackage, with requires (bsc#1264721)
References

Affected packages

openSUSE:Leap 16.0 / rsyslog

Package

Name
rsyslog
Purl
pkg:rpm/opensuse/rsyslog&distro=openSUSE%20Leap%2016.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
8.2502.0-160000.4.1

Ecosystem specific 

{
    "binaries":  [
        {
            "rsyslog":  "8.2502.0-160000.4.1",
            "rsyslog-devel":  "8.2502.0-160000.4.1",
            "rsyslog-diag-tools":  "8.2502.0-160000.4.1",
            "rsyslog-doc":  "8.2502.0-160000.4.1",
            "rsyslog-module-elasticsearch":  "8.2502.0-160000.4.1",
            "rsyslog-module-gcrypt":  "8.2502.0-160000.4.1",
            "rsyslog-module-gssapi":  "8.2502.0-160000.4.1",
            "rsyslog-module-gtls":  "8.2502.0-160000.4.1",
            "rsyslog-module-mmnormalize":  "8.2502.0-160000.4.1",
            "rsyslog-module-mysql":  "8.2502.0-160000.4.1",
            "rsyslog-module-omhttpfs":  "8.2502.0-160000.4.1",
            "rsyslog-module-omtcl":  "8.2502.0-160000.4.1",
            "rsyslog-module-ossl":  "8.2502.0-160000.4.1",
            "rsyslog-module-pgsql":  "8.2502.0-160000.4.1",
            "rsyslog-module-relp":  "8.2502.0-160000.4.1"
        }
    ]
}

Database specific

source 
"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:21535-1.json"