RHSA-2026:87408 — Red Hat Security Advisory: rsyslog security update

Fixed packages 78

Release	Package	Fixed in
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-crypto	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-crypto-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-debugsource	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-elasticsearch	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-elasticsearch-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-gnutls	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-gnutls-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-gssapi	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-gssapi-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-kafka	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-kafka-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmaudit	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmaudit-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmfields	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmfields-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmjsonparse	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmjsonparse-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmkubernetes	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmkubernetes-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmnormalize	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmnormalize-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmsnmptrapd	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mmsnmptrapd-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mysql	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-mysql-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-omamqp1	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-omamqp1-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-openssl	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-openssl-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-pgsql	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-pgsql-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-relp	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-relp-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-snmp	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-snmp-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-udpspoof	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 E4S rhel_e4s:8.8::appstream	rsyslog-udpspoof-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-crypto	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-crypto-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-debugsource	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-elasticsearch	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-elasticsearch-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-gnutls	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-gnutls-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-gssapi	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-gssapi-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-kafka	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-kafka-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmaudit	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmaudit-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmfields	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmfields-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmjsonparse	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmjsonparse-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmkubernetes	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmkubernetes-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmnormalize	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmnormalize-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmsnmptrapd	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mmsnmptrapd-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mysql	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-mysql-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-omamqp1	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-omamqp1-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-openssl	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-openssl-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-pgsql	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-pgsql-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-relp	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-relp-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-snmp	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-snmp-debuginfo	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-udpspoof	0:8.2102.0-13.el8_8.1
Red Hat · RHEL 8.8 TUS rhel_tus:8.8::appstream	rsyslog-udpspoof-debuginfo	0:8.2102.0-13.el8_8.1

Vulnerabilities 2

High 7.5

CVE-2026-19654

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity …

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu Azure Linux Alpine Wolfi

Aug 12, 2026
High 7.5

CVE-2026-78002

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation durin…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine

Aug 27, 2026

References

article
https://access.redhat.com/security/updates/classification/#important
report
https://bugzilla.redhat.com/show_bug.cgi?id=2502868
report
https://bugzilla.redhat.com/show_bug.cgi?id=2521135
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_87408.json
report
https://access.redhat.com/security/cve/CVE-2026-19654
advisory
https://www.cve.org/CVERecord?id=CVE-2026-19654
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-19654
article
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29
report
https://access.redhat.com/security/cve/CVE-2026-78002
advisory
https://www.cve.org/CVERecord?id=CVE-2026-78002
advisory
https://nvd.nist.gov/vuln/detail/CVE-2026-78002
article
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-g72f-gc6v-f2w3

Red Hat Security Advisory: rsyslog security update

Fixed packages 78

Vulnerabilities 2

Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

References