SUSE-SU-2026:5089-1: Security update for rsyslog
This update for rsyslog fixes the following issues:
- CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). - RainerScript replace() length wrap (bsc#1285036).
Other sources
This update for rsyslog fixes the following issues: CVE-2026-92709: omfile dynaFile template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). RainerScript replace() length wrap (bsc#1285036).
— SUSE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
suse/rsyslogto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-pgsqlto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-pgsql-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-udpspoof-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-debugsourceto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-udpspoofto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-gssapi-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-mysql-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-diag-toolsto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-relp-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-relpto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-mmnormalizeto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-snmp-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-gtlsto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-mysqlto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-docto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-diag-tools-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-gssapito a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-gtls-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-snmpto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade
suse/rsyslog-module-mmnormalize-debuginfoto a version that resolves this vulnerability.Fixed in 8.2106.0-8.30.2 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-2026-5089 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-LTSS-EXTENDED-SECURITY-2026-5089
Event History
Frequently Asked Questions
What configuration condition makes the arbitrary code execution issue relevant?
The issue involves rsyslog omfile dynaFile templates when a path component is influenced by untrusted input and lacks explicit secure-path handling.
Which rsyslog-related packages are included in this update?
The update covers rsyslog and listed related packages including PostgreSQL, MySQL, UDP spoofing, and GSSAPI modules, along with applicable debuginfo and debugsource packages.