A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rsyslog-cryptoUpgrade rsyslog-logrotateUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-gnutlsUpgrade rsyslog-mmnormalizeUpgrade rsyslog-opensslUpgrade rsyslog-relpUpgrade rsyslog-mmkubernetesUpgrade rsyslog-elasticsearchUpgrade rsyslog-docUpgrade rsyslog-snmpUpgrade rsyslog-omamqp1Upgrade rsyslog-gssapiUpgrade rsyslog-mmauditUpgrade rsyslog-mysqlUpgrade rsyslog-mmfieldsUpgrade rsyslog-udpspoofUpgrade rsyslog-pgsqlUpgrade rsyslog-kafkaUpgrade rsyslog | Oct 11, 2026 | Sep 15, 2026 |
| Amazon_linux_2023 | — | Upgrade rsyslog-elasticsearchUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-mmkubernetesUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-docUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslog-mmtaghostnameUpgrade rsyslog-mmtaghostname-debuginfoUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslogUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmfieldsUpgrade rsyslog-opensslUpgrade rsyslog-mmjsonparse | Sep 1, 2026 | Aug 12, 2026 |
| Debian | — | Upgrade rsyslog | Sep 21, 2026 | Aug 12, 2026 |
| Redhat_linux | — | Upgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-logrotateUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-snmpUpgrade rsyslog-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-mmkubernetesUpgrade rsyslog-debugsourceUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-mmauditUpgrade rsyslog-udpspoofUpgrade rsyslog-mysqlUpgrade rsyslog-gnutlsUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-relpUpgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmsnmptrapdUpgrade rsyslog-pgsqlUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-cryptoUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-elasticsearchUpgrade rsyslog-mmfieldsUpgrade rsyslog-docUpgrade rsyslog-omamqp1Upgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-kafkaUpgrade rsyslog-gssapiUpgrade rsyslogUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-udpspoof-debuginfo | Aug 17, 2026 | Jul 22, 2026 |
| Rocky_linux | — | Upgrade rsyslog-mmkubernetes-debuginfoUpgrade rsyslog-mmnormalizeUpgrade rsyslog-mmnormalize-debuginfoUpgrade rsyslog-mmauditUpgrade rsyslog-pgsql-debuginfoUpgrade rsyslog-mmfields-debuginfoUpgrade rsyslog-opensslUpgrade rsyslog-pgsqlUpgrade rsyslog-gssapiUpgrade rsyslog-logrotateUpgrade rsyslog-elasticsearchUpgrade rsyslog-mysql-debuginfoUpgrade rsyslog-gnutlsUpgrade rsyslog-mmkubernetesUpgrade rsyslog-udpspoofUpgrade rsyslog-openssl-debuginfoUpgrade rsyslog-mmsnmptrapd-debuginfoUpgrade rsyslog-omamqp1Upgrade rsyslog-snmp-debuginfoUpgrade rsyslog-mysqlUpgrade rsyslog-relpUpgrade rsyslog-crypto-debuginfoUpgrade rsyslog-mmjsonparseUpgrade rsyslog-gssapi-debuginfoUpgrade rsyslog-omamqp1-debuginfoUpgrade rsyslog-kafka-debuginfoUpgrade rsyslog-snmpUpgrade rsyslog-cryptoUpgrade rsyslog-mmfieldsUpgrade rsyslog-mmjsonparse-debuginfoUpgrade rsyslog-mmaudit-debuginfoUpgrade rsyslog-relp-debuginfoUpgrade rsyslog-debugsourceUpgrade rsyslogUpgrade rsyslog-kafkaUpgrade rsyslog-gnutls-debuginfoUpgrade rsyslog-elasticsearch-debuginfoUpgrade rsyslog-debuginfoUpgrade rsyslog-udpspoof-debuginfoUpgrade rsyslog-mmsnmptrapd | Sep 18, 2026 | Sep 16, 2026 |
| Ubuntu | — | Upgrade rsyslog | Aug 18, 2026 | Aug 13, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 28, 2026 | Aug 12, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub