Amazon Linux 2023 Security Advisory: ALAS2023-2026-3449
Advisory Released Date: 2026-11-12
Advisory Updated Date: 2026-11-12
Severity:
Important
Issue Overview:
An SQL injection issue affects rsyslog deployments using the optional omclickhouse output module. Its built-in INSERT template used escaping that did not account for ClickHouse backslash escapes. A sender able to submit a log message routed to this action could alter the SQL sent to ClickHouse, potentially forging stored log records or evaluating expressions with the configured ClickHouse accounts privileges. (CVE-2026-93404)
Affected Packages:
rsyslog
Issue Correction:
Run dnf update rsyslog --releasever 2023.12.20261112 or dnf update --advisory ALAS2023-2026-3449 --releasever 2023.12.20261112 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation
New Packages:
aarch64:
rsyslog-mmfields-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-elasticsearch-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmaudit-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmfields-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-crypto-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-debugsource-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmkubernetes-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-openssl-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmtaghostname-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmtaghostname-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-logrotate-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-elasticsearch-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmjsonparse-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmkubernetes-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmnormalize-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-crypto-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmnormalize-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmjsonparse-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-openssl-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
rsyslog-mmaudit-debuginfo-8.2204.0-3.amzn2023.0.10.aarch64
noarch:
rsyslog-doc-8.2204.0-3.amzn2023.0.10.noarch
src:
rsyslog-8.2204.0-3.amzn2023.0.10.src
x86_64:
rsyslog-elasticsearch-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-openssl-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-crypto-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmfields-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmtaghostname-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmaudit-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmnormalize-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-logrotate-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmkubernetes-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmfields-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmnormalize-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmkubernetes-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-debugsource-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmaudit-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmjsonparse-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-elasticsearch-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-crypto-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmjsonparse-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-mmtaghostname-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64
rsyslog-openssl-debuginfo-8.2204.0-3.amzn2023.0.10.x86_64