Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
rsyslog can crash on specially crafted network data
published 2 months ago
Summary
The rsyslog logging service on AlmaLinux can stop working if it receives a malformed TCP message. This could disrupt log collection and monitoring. Apply the latest rsyslog update from AlmaLinux to prevent the crash.
What to do
- Update almalinux rsyslog to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-crypto to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-doc to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-elasticsearch to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-gnutls to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-gssapi to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-kafka to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-logrotate to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmaudit to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmfields to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmjsonparse to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmkubernetes to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmnormalize to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mmsnmptrapd to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-mysql to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-omamqp1 to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-openssl to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-pgsql to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-relp to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-snmp to version 8.2102.0-113.el9_2.1.tuxcare.els1.
- Update almalinux rsyslog-udpspoof to version 8.2102.0-113.el9_2.1.tuxcare.els1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-crypto |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-doc |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-elasticsearch |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-gnutls |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-gssapi |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-kafka |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-logrotate |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmaudit |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmfields |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmjsonparse |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmkubernetes |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmnormalize |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mmsnmptrapd |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-mysql |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-omamqp1 |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-openssl |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-pgsql |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-relp |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-snmp |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
| TuxCare:AlmaLinux:9.2 | almalinux | rsyslog-udpspoof |
< 8.2102.0-113.el9_2.1.tuxcare.els1 Fix: upgrade to 8.2102.0-113.el9_2.1.tuxcare.els1
|
Original advisory text
rsyslog: Fix of CVE-2026-19654
- CVE-2026-19654: remote crash in imptcp regex framing; oversize-frame recovery
can zero iCurrLine, making processDataRcvd_regexFraming() submit a negative
message length
can zero iCurrLine, making processDataRcvd_regexFraming() submit a negative
message length
References
- https://errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1788196350.html Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-19654 Vendor Advisory
Timeline
Published31 Aug 2026
Updated26 Oct 2026
First seen26 Oct 2026
Sources
CLSA-2026-1788196350 · OSV
Track software like this
Free during beta