CLSA-2026-1791960930 rsyslog: Fix of CVE-2026-78002

CVE-2026-78002: rainerscript: align replace sizing rewind in doFuncReplace...

RLSA-2026:80817 Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

rsyslog security update

An update is available for rsyslog. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It...

CLSA-2026-1791954698 rsyslog: Fix of CVE-2026-78002

CVE-2026-78002: rainerscript: align replace sizing rewind in doFuncReplace...

Unity Linux 20.1070a Security Update: rsyslog (UTSA-2026-130089)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130089 advisory. A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted...

RockyLinux 8 : rsyslog (RLSA-2026:80817)

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:80817 advisory. rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd...

CLSA-2026-1791918528 rsyslog: Fix of CVE-2026-78002

CVE-2026-78002: rainerscript: align replace sizing rewind in doFuncReplace...

CentOS Linux 8.4 [TuxCare] Security Update: rsyslog / rsyslog-crypto / rsyslog-doc / rsyslog-elasticsearch / etc (CENTOS8.4:CLSA-2026:1791918528)

The CentOS Linux 8.4 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS8.4:CLSA-2026:1791918528 advisory. - A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by...

rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

Important: Red Hat Security Advisory: rsyslog security, bug fix, and enhancement update

An update for rsyslog is now available for Red Hat Enterprise Linux 10.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

Important: Red Hat Security Advisory: rsyslog security update

An update for rsyslog is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript replace function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory...

rsyslog security update

8.2102.0-15.0.1.el810.3 - Fixes rsyslog segfault during shutdown when relp is configured with TLS Orabug: 37588023 8.2102.0-15.3 - Fix CVE-2026-78002: heap buffer overflow in RainerScript replace function Resolves: RHEL-246632 8.2102.0-15.2 - Backport: imptcp: guard regex-framing match against...

Important: rsyslog security update

The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format. Security Fixes: rsyslog: A configuration-dependent issue in rsyslog's optional imptc...

CLSA-2026-1791371082 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

CLSA-2026-1791277470 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

CLSA-2026-1791277281 Fix CVE(s): CVE-2026-78002

SECURITY UPDATE: Heap buffer overflow in RainerScript replace - debian/patches/CVE-2026-78002.patch: rewind the sizing pass by the full failed partial-match length in doFuncReplace in grammar/rainerscript.c, so the allocated result matches what the copy pass writes -...

Rocky Linux 10.2 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69541)

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669541 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description blo...

Rocky Linux 9 [CIQ] Security Update: rsyslog / rsyslog-crypto / rsyslog-crypto-debuginfo / etc (crlsa-2026_69540)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202669540 advisory. rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace function CVE-2026-78002 Tenable has extracted the preceding description block...

CLSA-2026-1790809774 rsyslog: Fix of CVE-2026-78002

CVE-2026-78002: heap buffer overflow in RainerScript replace; rewind the sizing pass by the full failed partial-match length so the allocated buffer matches what the copy pass writes...