SUSE Rsyslog Buffer Overflow Vulnerabilities Announced

SUSE has released important updates for the rsyslog service addressing critical vulnerabilities. The updates fix CVE-2026-61548, which can lead to a stack buffer overflow when parsing crafted RFC 5424 messages. Additionally, a configuration-dependent issue in the optional imptcp input module allows unauthenticated remote peers to crash rsyslogd. Affected systems include SUSE Linux Enterprise Server versions 12 SP5 and 15 SP7. Administrators are urged to apply the patches immediately to mitigate potential exploitation. The vulnerabilities have been rated important, emphasizing the need for prompt action. The updates were released on August 4, 2026, with advisories published on August 5, 2026.

Key Points: • SUSE released patches for critical vulnerabilities in rsyslog affecting multiple versions. • CVE-2026-61548 can lead to a stack buffer overflow from crafted messages. • Immediate patching is recommended to prevent potential exploitation.