Debian/syslog-ng: high 7.1
Due to a missing sanitization call in [`afsql_dd_run_query`](https://github.com/syslog-ng/syslog-ng/blob/649e6e18e3459fb4467000a88dfb12fa97f9719c/modules/afsql/afsql.c#L219), syslog-ng before 4.12 are
Action: Upgrade syslog-ng to 4.12.0-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.12.0-1 | - |
Fixed versions
| 4.12.0-1 |
Sources
- osv: DEBIAN-CVE-2026-39879#Debian:14/syslog-ng
- https://security-tracker.debian.org/tracker/CVE-2026-39879
published · modified · JSON