Red Hat Security Advisory

RHSA-2026:95573

rsyslog security update

Released 2026-11-05 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux AppStream AUS (v.8.4) rsyslog-8.1911.0-7.el8_4.5, rsyslog-crypto-8.1911.0-7.el8_4.5, rsyslog-elasticsearch-8.1911.0-7.el8_4.5 +14
Red Hat Enterprise Linux AppStream EUS EXTENSION (v.8.4) rsyslog-8.1911.0-7.el8_4.5, rsyslog-crypto-8.1911.0-7.el8_4.5, rsyslog-elasticsearch-8.1911.0-7.el8_4.5 +14

TI-2026-54276 CVE-2026-78002

MEDIUM 41

A flaw was found in rsyslog.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01064 Published 2026-08-27 Partial fix · 8.2510.0-5.el10_2.2, 8.2412.0-1.el10_0.2 +9 CWE-131

TI-2026-15960 CVE-2026-19654

MEDIUM 40

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00772 Published 2026-08-12 Fixed in 8.2510.0-5.el10_2.1, 8.2412.0-1.el10_0.1 +9 CWE-125