CVE-2026-39879
Publication date 21 July 2026
Last updated 21 July 2026
Ubuntu priority
Description
(Due to a missing sanitization call in [`afsql_dd_run_query`](https://g ...)
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| syslog-ng | 26.04 LTS resolute |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 14.04 LTS trusty |
Needs evaluation
|
References
Other references
- https://www.cve.org/CVERecord?id=CVE-2026-39879
- https://github.com/syslog-ng/syslog-ng/security/advisories/GHSA-qwf9-6222-m24m
- https://github.com/syslog-ng/syslog-ng/commit/1e872e301436efa5d3fcd54e7628ac82c57698d2 (syslog-ng-4.12.0)
- https://github.com/syslog-ng/syslog-ng/commit/1aba7537f0c406090f98a649475acbf517440220 (syslog-ng-4.12.0)
- https://github.com/syslog-ng/syslog-ng/commit/4b61a0b1dad69368bc3b93b607141708d0036830 (syslog-ng-4.12.0)
- https://github.com/syslog-ng/syslog-ng/commit/4c0aebf7a1c0a8177bdf4fb67803e19dddc3dbf2 (syslog-ng-4.12.0)