Release rsyslog-8.2102.0-15.el8_10.3 ALSA-2026:80817
还没有人认领这个 Issue。
评估
- 难度
- 5/5
- 预计耗时
- 一周以上
- 新手友好度
- 15/100
- Issue 类型
- 缺陷
- 描述清晰度
- 需要澄清
- 活跃度
- 活跃
- 技术栈
- linux
- 领域
- security
调研方向
The report identifies issues in the optional imptcp input module and the RainerScript replace() function, but does not name source files, tests, or a fix. Start by locating the code and security advisories for CVE-2026-19654 and CVE-2026-78002; done means both denial-of-service vulnerabilities are addressed and verified.
由索引模型根据 Issue 内容生成。
描述
rsyslog security update
Severity: Important
Description
The rsyslog packages provide an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine-grained control over output format.
Security Fix(es):
- rsyslog: A configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd (CVE-2026-19654)
- rsyslog: rsyslog: Denial of service via heap buffer overflow in RainerScript replace() function (CVE-2026-78002)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected packages:
rsyslog-8.2102.0-15.el8_10.3.x86_64
rsyslog-crypto-8.2102.0-15.el8_10.3.x86_64
rsyslog-doc-8.2102.0-15.el8_10.3.noarch
rsyslog-elasticsearch-8.2102.0-15.el8_10.3.x86_64
rsyslog-gnutls-8.2102.0-15.el8_10.3.x86_64
rsyslog-gssapi-8.2102.0-15.el8_10.3.x86_64
rsyslog-kafka-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmaudit-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmfields-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmjsonparse-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmkubernetes-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmnormalize-8.2102.0-15.el8_10.3.x86_64
rsyslog-mmsnmptrapd-8.2102.0-15.el8_10.3.x86_64
rsyslog-mysql-8.2102.0-15.el8_10.3.x86_64
rsyslog-omamqp1-8.2102.0-15.el8_10.3.x86_64
rsyslog-openssl-8.2102.0-15.el8_10.3.x86_64
rsyslog-pgsql-8.2102.0-15.el8_10.3.x86_64
rsyslog-relp-8.2102.0-15.el8_10.3.x86_64
rsyslog-snmp-8.2102.0-15.el8_10.3.x86_64
rsyslog-udpspoof-8.2102.0-15.el8_10.3.x86_64
rsyslog-8.2102.0-15.el8_10.3.s390x
rsyslog-crypto-8.2102.0-15.el8_10.3.s390x
rsyslog-doc-8.2102.0-15.el8_10.3.noarch
rsyslog-elasticsearch-8.2102.0-15.el8_10.3.s390x
rsyslog-gnutls-8.2102.0-15.el8_10.3.s390x
rsyslog-gssapi-8.2102.0-15.el8_10.3.s390x
rsyslog-kafka-8.2102.0-15.el8_10.3.s390x
rsyslog-mmaudit-8.2102.0-15.el8_10.3.s390x
rsyslog-mmfields-8.2102.0-15.el8_10.3.s390x
rsyslog-mmjsonparse-8.2102.0-15.el8_10.3.s390x
rsyslog-mmkubernetes-8.2102.0-15.el8_10.3.s390x
rsyslog-mmnormalize-8.2102.0-15.el8_10.3.s390x
rsyslog-mmsnmptrapd-8.2102.0-15.el8_10.3.s390x
rsyslog-mysql-8.2102.0-15.el8_10.3.s390x
rsyslog-omamqp1-8.2102.0-15.el8_10.3.s390x
rsyslog-openssl-8.2102.0-15.el8_10.3.s390x
rsyslog-pgsql-8.2102.0-15.el8_10.3.s390x
rsyslog-relp-8.2102.0-15.el8_10.3.s390x
rsyslog-snmp-8.2102.0-15.el8_10.3.s390x
rsyslog-udpspoof-8.2102.0-15.el8_10.3.s390x
rsyslog-8.2102.0-15.el8_10.3.ppc64le
rsyslog-crypto-8.2102.0-15.el8_10.3.ppc64le
rsyslog-doc-8.2102.0-15.el8_10.3.noarch
rsyslog-elasticsearch-8.2102.0-15.el8_10.3.ppc64le
rsyslog-gnutls-8.2102.0-15.el8_10.3.ppc64le
rsyslog-gssapi-8.2102.0-15.el8_10.3.ppc64le
rsyslog-kafka-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmaudit-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmfields-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmjsonparse-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmkubernetes-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmnormalize-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mmsnmptrapd-8.2102.0-15.el8_10.3.ppc64le
rsyslog-mysql-8.2102.0-15.el8_10.3.ppc64le
rsyslog-omamqp1-8.2102.0-15.el8_10.3.ppc64le
rsyslog-openssl-8.2102.0-15.el8_10.3.ppc64le
rsyslog-pgsql-8.2102.0-15.el8_10.3.ppc64le
rsyslog-relp-8.2102.0-15.el8_10.3.ppc64le
rsyslog-snmp-8.2102.0-15.el8_10.3.ppc64le
rsyslog-udpspoof-8.2102.0-15.el8_10.3.ppc64le
rsyslog-8.2102.0-15.el8_10.3.aarch64
rsyslog-crypto-8.2102.0-15.el8_10.3.aarch64
rsyslog-doc-8.2102.0-15.el8_10.3.noarch
rsyslog-elasticsearch-8.2102.0-15.el8_10.3.aarch64
rsyslog-gnutls-8.2102.0-15.el8_10.3.aarch64
rsyslog-gssapi-8.2102.0-15.el8_10.3.aarch64
rsyslog-kafka-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmaudit-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmfields-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmjsonparse-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmkubernetes-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmnormalize-8.2102.0-15.el8_10.3.aarch64
rsyslog-mmsnmptrapd-8.2102.0-15.el8_10.3.aarch64
rsyslog-mysql-8.2102.0-15.el8_10.3.aarch64
rsyslog-omamqp1-8.2102.0-15.el8_10.3.aarch64
rsyslog-openssl-8.2102.0-15.el8_10.3.aarch64
rsyslog-pgsql-8.2102.0-15.el8_10.3.aarch64
rsyslog-relp-8.2102.0-15.el8_10.3.aarch64
rsyslog-snmp-8.2102.0-15.el8_10.3.aarch64
rsyslog-udpspoof-8.2102.0-15.el8_10.3.aarch64
- 主要语言
- 没有语言数据
- 星标
- 2
- 派生
- 0
- PR 合并指标
- 30 天内没有已合并 PR
环境准备
- 没有 Dockerfile 或 Docker Compose 文件
- 没有 Pull Request 模板
- 阅读贡献指南
从这里开始
- 先读完整个 Issue，再读项目的贡献指南。
- 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
- Fork 仓库，在一个分支上完成修改。
- 提交 Pull Request，并在描述里引用这个 Issue 编号。
AlmaLinux/updates 的其他 Issue
-
难度 1/5 1 小时以内 新手友好度 85/100
-
难度 1/5 1 小时以内 新手友好度 60/100
-
难度 2/5 1-3 小时 新手友好度 62/100
-
难度 4/5 3-5 天 新手友好度 12/100
-
难度 4/5 3-5 天 新手友好度 15/100
查看 AlmaLinux/updates 的全部 Issue
相似的 Issue
-
难度 2/5 1-3 小时 新手友好度 75/100
apache/rocketmq-dashboard#6864 ·
维护者通常 3 天内回复
-
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 1 天内回复
-
enhancement
难度 2/5 1-3 小时 新手友好度 72/100
维护者通常 1 天内回复
-
KV session storage adds duplicate session ids to the shop index on every token refresh可能已有人在做 @rorcores 今天认领。 未关闭devtools-gardener
难度 2/5 1-3 小时 新手友好度 75/100
Shopify/shopify-app-js#3478 ·
维护者通常 1 天内回复
-
难度 2/5 1-3 小时 新手友好度 62/100
Uuriko/project-room#3637 ·
维护者通常 1 天内回复