Red Hat Security Advisory

RHSA-2026:91582

rsyslog security update

Released 2026-10-28 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.6) rsyslog-8.2102.0-7.el8_6.2, rsyslog-crypto-8.2102.0-7.el8_6.2, rsyslog-elasticsearch-8.2102.0-7.el8_6.2 +16
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.6) rsyslog-8.2102.0-7.el8_6.2, rsyslog-crypto-8.2102.0-7.el8_6.2, rsyslog-elasticsearch-8.2102.0-7.el8_6.2 +16

TI-2026-54276 CVE-2026-78002

MEDIUM 41

A flaw was found in rsyslog.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01064 Published 2026-08-27 Partial fix · 8.2510.0-5.el10_2.2, 8.2412.0-1.el10_0.2 +9 CWE-131

TI-2026-15960 CVE-2026-19654

MEDIUM 40

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00772 Published 2026-08-12 Fixed in 8.2510.0-5.el10_2.1, 8.2412.0-1.el10_0.1 +9 CWE-125