Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_67584)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202667584 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

RockyLinux 10 : rsyslog (RLSA-2026:67584)

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67584 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

RockyLinux 9 : rsyslog (RLSA-2026:67583)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:67583 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd CVE-2026-19654...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code...

RHEL 9 : rsyslog (RHSA-2026:67583)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:67583 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering o...

Important: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

RHEL 10 : rsyslog (RHSA-2026:66405)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:66405 advisory. The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering ...

EUVD-2026-60067

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49307

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49307

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2026-49307

CVE-2026-49307 describes a permission control vulnerability in the device’s multi-mode input module, affecting confidentiality. CVSS 3.1 base score 6.2 (MEDIUM); attack vector LOCAL, complexity LOW, privileges NONE, user interaction NONE, scope UNCHANGED, with confidentiality impact HIGH. There a...

CVE-2026-49307: Exposure of Sensitive Information to an Unauthorized Actor

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

PT-2026-73223

Permission control vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect service confidentiality...

OPENSUSE-SU-2026:21535-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite bsc1272414. - input sequence during oversize-frame recovery in imptcp can cause denial of service bsc1271910. Changes for rsyslog: - added a devel...

SUSE-SU-2026:3498-1 Security update for rsyslog

This update for rsyslog fixes the following issues: - CVE-2026-61548: parsing of crafted RFC 5424 messages in mmpstrucdata can lead to a stack buffer overflow bsc1272414. - Configuration-dependent issue in the optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

CVE-2025-68968

Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...

CVE-2025-68968

Double free vulnerability in the multi-mode input module. Impact: Successful exploitation of this vulnerability may affect the input function...

CVE-2025-68968

CVE-2025-68968 is a double-free vulnerability in the multi-mode input module affecting Huawei HarmonyOS (and mirrored in multiple CVE trackers). Affected component: the multi-mode input module; root cause: double free in the input handling code, with the impact described as potentially affecting ...