1 files changed, 39 insertions, 0 deletions
diff --git a/app-admin/rsyslog/files/8-stable/rsyslog-8.26.0-fix-zmq3-format-security.patch b/app-admin/rsyslog/files/8-stable/rsyslog-8.26.0-fix-zmq3-format-security.patch
new file mode 100644
index 000000000000..b285798bfe45
--- /dev/null
+++ b/app-admin/rsyslog/files/8-stable/rsyslog-8.26.0-fix-zmq3-format-security.patch
@@ -0,0 +1,39 @@
+--- a/contrib/imzmq3/imzmq3.c
++++ b/contrib/imzmq3/imzmq3.c
+@@ -403,7 +403,7 @@ static rsRetVal createSocket(instanceConf_t* info, void** sock) {
+ 
+     /* Do the bind/connect... */
+     if (info->action==ACTION_CONNECT) {
+-        rv = zsocket_connect(*sock, info->description);
++        rv = zsocket_connect(*sock, "%s", info->description);
+         if (rv == -1) {
+             errmsg.LogError(0,
+                             RS_RET_INVALID_PARAMS,
+@@ -413,7 +413,7 @@ static rsRetVal createSocket(instanceConf_t* info, void** sock) {
+         }
+         DBGPRINTF("imzmq3: connect for %s successful\n",info->description);
+     } else {
+-        rv = zsocket_bind(*sock, info->description);
++        rv = zsocket_bind(*sock, "%s", info->description);
+         if (rv == -1) {
+             errmsg.LogError(0,
+                             RS_RET_INVALID_PARAMS,
+--- a/contrib/omzmq3/omzmq3.c
++++ b/contrib/omzmq3/omzmq3.c
+@@ -242,14 +242,14 @@ static rsRetVal initZMQ(instanceData* pData) {
+     if (pData->action == ACTION_BIND) {
+         /* bind asserts, so no need to test return val here
+            which isn't the greatest api -- oh well */
+-        if(-1 == zsocket_bind(pData->socket, (char*)pData->description)) {
++        if(-1 == zsocket_bind(pData->socket, "%s", (char*)pData->description)) {
+             errmsg.LogError(0, RS_RET_NO_ERRCODE, "omzmq3: bind failed for %s: %s",
+                             pData->description, zmq_strerror(errno));
+             ABORT_FINALIZE(RS_RET_NO_ERRCODE);
+         }
+         DBGPRINTF("omzmq3: bind to %s successful\n",pData->description);
+     } else {
+-        if(-1 == zsocket_connect(pData->socket, (char*)pData->description)) {
++        if(-1 == zsocket_connect(pData->socket, "%s", (char*)pData->description)) {
+             errmsg.LogError(0, RS_RET_NO_ERRCODE, "omzmq3: connect failed for %s: %s", 
+                             pData->description, zmq_strerror(errno));
+             ABORT_FINALIZE(RS_RET_NO_ERRCODE);