All errata/c10f2/ALT-PU-2026-20150-4
ALT-PU-2026-20150-4

Package update rsyslog in branch c10f2

Version8.2610.0-alt1
Published2026-11-02
Max severityHIGH
Severity:

Closed issues (1)

CVE-2026-19654
HIGH7.5

A unauthenticated remote peer may lead rsyslogd to crash due to a flaw in the optional imptcp module. A crafted input sequence during oversize-frame recovery can cause an invalid internal message length and terminate rsyslogd. No confidentiality or integrity impact, privilege escalation, or code execution has been identified. imtcp and the default imptcp framing modes are not affected.

Published: 2026-08-12Modified: 2026-10-30
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Closed bugs (8)

Не стартует автоматически с systemd

Не стартует автоматически с systemd

rsyslog-mongo: /etc/rsyslog.d/01_mongo.conf: line 1: invalid character '\' in object definition

rsyslog-mongo: /etc/rsyslog.d/01_mongo.conf: line 1: invalid character '\' in object definition

Не применяются права из директив rsyslog

Не применяются права из директив rsyslog

Просьба собрать rsyslog-kafka

rsyslog: Обновить до актуальной версии