Most recent entries from all

ALSA-2026:67583 — Low: rsyslog security update

Affected: AlmaLinux:9: rsyslog, AlmaLinux:9: rsyslog-crypto, AlmaLinux:9: rsyslog-doc, AlmaLinux:9: rsyslog-elasticsearch, AlmaLinux:9: rsyslog-gnutls, AlmaLinux:9: rsyslog-gssapi, AlmaLinux:9: rsyslog-kafka, AlmaLinux:9: rsyslog-logrotate, AlmaLinux:9: rsyslog-mmaudit, AlmaLinux:9: rsyslog-mmfields and 11 more

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.

Security Fix(es):

* rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

fkie_cve-2026-19654

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

msrc_CVE-2026-19654 — Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote…

msrc_CVE-2026-19654

OESA-2026-3504 — rsyslog security update

Affected: openEuler:22.03-LTS-SP4: rsyslog, openEuler:24.03-LTS-SP1: rsyslog, openEuler:24.03-LTS-SP3: rsyslog, openEuler:24.03-LTS-SP4: rsyslog, openEuler:20.03-LTS-SP4: rsyslog

RSYSLOG is the rocket-fast system for log processing.It offers high-performance, great security features and a modular design. While it started as a regular syslogd, rsyslog has evolved into a kind of swiss army knife of logging, being able to accept inputs from a wide variety of sources, transform them, and output to the results to diverse destinations. Security Fix(es):

RHSA-2026:66405 — Red Hat Security Advisory: rsyslog security update

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

RHSA-2026:67583 — Red Hat Security Advisory: rsyslog security update

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

UBUNTU-CVE-2026-19654

Affected: Ubuntu:14.04:LTS: rsyslog, Ubuntu:Pro:16.04:LTS: rsyslog, Ubuntu:Pro:18.04:LTS: rsyslog, Ubuntu:Pro:20.04:LTS: rsyslog, Ubuntu:22.04:LTS: rsyslog, Ubuntu:24.04:LTS: rsyslog, Ubuntu:26.04:LTS: rsyslog