RLSA-2026:98558 — Important: rsyslog security update

Summary

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

Security Fix(es):

* rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function (CVE-2026-78002)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Fixed packages 157

Release	Package	Fixed in
Rocky Linux · 10	rsyslog	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-crypto-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debugsource	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debugsource	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debugsource	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-debugsource	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-doc	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-elasticsearch-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gnutls-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-gssapi-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-kafka-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmaudit-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmfields-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmjsonparse-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmkubernetes-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmnormalize-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mmsnmptrapd-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-mysql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-omamqp1-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-openssl-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-pgsql-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-relp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-snmp-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof-debuginfo	0:8.2604.0-5.el10_3.1
Rocky Linux · 10	rsyslog-udpspoof-debuginfo	0:8.2604.0-5.el10_3.1

Vulnerabilities 1

High 7.5

CVE-2026-78002

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation durin…

Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 6 Linux Debian Ubuntu Azure Linux Alpine

Aug 27, 2026

References

report
https://bugzilla.redhat.com/show_bug.cgi?id=2521135
advisory
https://access.redhat.com/errata/RHSA-2026:98558

Important: rsyslog security update

Summary

Fixed packages 157

Vulnerabilities 1

Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function

References