[CLSA-2026:1788344259] Fix CVE(s): CVE-2026-19654
Type:
security
Severity:
Important
Release date:
2026-09-02 10:17:50 UTC
Description:
* SECURITY UPDATE: Denial of service in the optional imptcp module - debian/patches/CVE-2026-19654.patch: guard the regex framing match at line start in plugins/imptcp/imptcp.c, so a match at offset zero after oversize-frame recovery can no longer submit a negative message length - CVE-2026-19654
CVEs fixed:
Updated packages:
  • rsyslog_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:8fe13470501043367b5f72bb56d0d36145841050
  • rsyslog-czmq_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:7c746d998c4cc7f737bae44d5287be5c64f4b373
  • rsyslog-elasticsearch_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:4eae81470275e37bd72d6b5c363db8cdf6d6004d
  • rsyslog-gnutls_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:bb17a2de8d1871aea9a9dcf0bb3424dd99c420f9
  • rsyslog-gssapi_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:2b5c3d94e2c92a8b2bd792702b680fc960fc51fd
  • rsyslog-hiredis_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:9720ec675d777066b7c1bec5421378fe63074746
  • rsyslog-kafka_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:24ca932396387209d3ece6e030a9b4d3f88ea6a6
  • rsyslog-mongodb_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:69e581ae3ef4b8148599ca1fed794836896fdd45
  • rsyslog-mysql_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:64ed3cb3cccbeebc55a3767ca8f170681bcf3325
  • rsyslog-openssl_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:a75152b217ba0bdf787656b6fc0dbc38b8e1a077
  • rsyslog-pgsql_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:c67a461a0fe6b37603338c6b04963f626136818b
  • rsyslog-relp_8.2001.0-1ubuntu1.3+tuxcare.els1_amd64.deb
    sha:3e534968572cce912df4099cf078722558c471bd
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.