A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsyslog-mmsnmptrapdUpgrade rsyslog-cryptoUpgrade rsyslog-opensslUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmjsonparseUpgrade rsyslog-logrotateUpgrade rsyslog-gnutlsUpgrade rsyslog-relpUpgrade rsyslog-docUpgrade rsyslog-udpspoofUpgrade rsyslog-kafkaUpgrade rsyslog-gssapiUpgrade rsyslog-mmkubernetesUpgrade rsyslogUpgrade rsyslog-omamqp1Upgrade rsyslog-mmfieldsUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmauditUpgrade rsyslog-pgsqlUpgrade rsyslog-mysqlUpgrade rsyslog-snmp | Oct 11, 2026 | Sep 15, 2026 |
| Amazon_linux_2023 | — | Upgrade rsyslog-logrotateUpgrade rsyslog-debugsourceUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmtaghostname-debuginfoUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-docUpgrade rsyslog-mmtaghostnameUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmkubernetesUpgrade rsyslogUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-mmfieldsUpgrade rsyslog-mmauditUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmnormalize | Sep 1, 2026 | Aug 12, 2026 |
| Debian | — | Upgrade rsyslog | Sep 21, 2026 | Aug 12, 2026 |
| Redhat_linux | — | Upgrade rsyslog-relp-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-mmkubernetesUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-debugsourceUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-gssapiUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmfieldsUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-docUpgrade rsyslog-omamqp1Upgrade rsyslog-mmsnmptrapdUpgrade rsyslog-pgsqlUpgrade rsyslog-opensslUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslogUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-kafkaUpgrade rsyslog-mmaudit-debuginfo | Aug 17, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade rsyslog-crypto-debuginfoUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-snmp-debuginfoUpgrade rsyslog-udpspoofUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-pgsqlUpgrade rsyslog-mmkubernetesUpgrade rsyslog-logrotateUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-elasticsearchUpgrade rsyslog-gssapiUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-mysqlUpgrade rsyslog-omamqp1Upgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-kafkaUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-snmpUpgrade rsyslog-debugsourceUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslogUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmfields | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade rsyslog | Aug 18, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 28, 2026 | Aug 12, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub