Summary
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.
Security Fix(es):
* rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Fixed packages 21
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux · 9 | rsyslog | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-crypto | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-doc | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-elasticsearch | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-gnutls | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-gssapi | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-kafka | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-logrotate | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmaudit | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmfields | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmjsonparse | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmkubernetes | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmnormalize | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mmsnmptrapd | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-mysql | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-omamqp1 | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-openssl | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-pgsql | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-relp | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-snmp | 8.2510.0-2.el9_8.1 |
| AlmaLinux · 9 | rsyslog-udpspoof | 8.2510.0-2.el9_8.1 |
Vulnerabilities 1
-
High 7.5
Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity …