Red Hat Security Advisory

RHSA-2026:86124

rsyslog security update

Released 2026-10-20 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream E4S (v.9.2) rsyslog-8.2102.0-113.el9_2.3, rsyslog-crypto-8.2102.0-113.el9_2.3, rsyslog-elasticsearch-8.2102.0-113.el9_2.3 +17

TI-2026-54276 CVE-2026-78002

MEDIUM 41

A flaw was found in rsyslog.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01064 Published 2026-08-27 Partial fix · 8.2510.0-5.el10_2.2, 8.2412.0-1.el10_0.2 +9 CWE-131

TI-2026-15960 CVE-2026-19654

MEDIUM 40

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00772 Published 2026-08-12 Fixed in 8.2510.0-5.el10_2.1, 8.2412.0-1.el10_0.1 +9 CWE-125