Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package rsyslog for openSUSE:Factory checked in at 2026-08-26 19:51:08 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rsyslog (Old) and /work/SRC/openSUSE:Factory/.rsyslog.new.1258 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rsyslog" Wed Aug 26 19:51:08 2026 rev:191 rq:1373530 version:8.2606.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rsyslog/rsyslog.changes 2026-08-01 18:30:01.481190821 +0200 +++ /work/SRC/openSUSE:Factory/.rsyslog.new.1258/rsyslog.changes 2026-08-26 19:51:13.936463878 +0200 @@ -1,0 +2,6 @@ +Tue Aug 25 06:25:15 UTC 2026 - Thomas Blume <[email protected]> + +- fix RainerScript replace() heap buffer overflow (bsc#1275926) + * add 0001-fix-RainerScript-replace-heap-buffer-overflow.patch + +------------------------------------------------------------------- New: ---- 0001-fix-RainerScript-replace-heap-buffer-overflow.patch ----------(New B)---------- New:- fix RainerScript replace() heap buffer overflow (bsc#1275926) * add 0001-fix-RainerScript-replace-heap-buffer-overflow.patch ----------(New E)---------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rsyslog.spec ++++++ --- /var/tmp/diff_new_pack.zhXGz4/_old 2026-08-26 19:51:15.230509453 +0200 +++ /var/tmp/diff_new_pack.zhXGz4/_new 2026-08-26 19:51:15.234509594 +0200 @@ -237,6 +237,7 @@ Source19: NetworkManager.frule Source20: rsyslog-tmpfiles.conf Patch0: 0001-imptcp-guard-regex-framing-match-at-line-start.patch +Patch1: 0001-fix-RainerScript-replace-heap-buffer-overflow.patch # this is a dirty hack since % dir does only work for the specified directory and nothing above # but I want to be able to switch this to /etc/apparmor.d once the profiles received more testing ++++++ 0001-fix-RainerScript-replace-heap-buffer-overflow.patch ++++++ >From 581bfc458ad6800f3825186b54527d82c52c5d85 Mon Sep 17 00:00:00 2001 From: Thomas Blume <[email protected]> Date: Tue, 25 Aug 2026 08:24:03 +0200 Subject: [PATCH] fix: RainerScript replace() heap buffer overflow (bsc#1275926) --- grammar/rainerscript.c | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/grammar/rainerscript.c b/grammar/rainerscript.c index 7a3f8f4e4..56b366a46 100644 --- a/grammar/rainerscript.c +++ b/grammar/rainerscript.c @@ -1801,8 +1801,8 @@ static es_str_t *doFuncReplace(struct svar *__restrict__ const operandVal, if (src_buff[i] == find[j]) { j++; } else if (j > 0) { - i -= (j - 1); - lDst -= (j - 1); + i -= j; + lDst -= j; j = 0; } } -- 2.55.0
