Linux · Security advisory · November 7, 2026

ALSA-2026:80817: Security update for 20 packages

ALSA-2026:80817, released November 7, 2026, fixes 2 CVEs across 20 products. None of them is reported as exploited. Patch Radar priority: High.

High
CVEs closed
2
None rated Critical
Exploited
0
None reported
Exploitation more likely
0
Vendor assessment
Highest EPSS
0.0106
64th percentile

Priority of the 2 CVEs

Patch now 0 Urgent 0 High 2 Routine 0

Fixed package versions

ProductReleaseFixed in
rsyslogalmalinux 88.2102.0-15.el8_10.3
rsyslog-cryptoalmalinux 88.2102.0-15.el8_10.3
rsyslog-docalmalinux 88.2102.0-15.el8_10.3
rsyslog-elasticsearchalmalinux 88.2102.0-15.el8_10.3
rsyslog-gnutlsalmalinux 88.2102.0-15.el8_10.3
rsyslog-gssapialmalinux 88.2102.0-15.el8_10.3
rsyslog-kafkaalmalinux 88.2102.0-15.el8_10.3
rsyslog-mmauditalmalinux 88.2102.0-15.el8_10.3
rsyslog-mmfieldsalmalinux 88.2102.0-15.el8_10.3
rsyslog-mmjsonparsealmalinux 88.2102.0-15.el8_10.3
rsyslog-mmkubernetesalmalinux 88.2102.0-15.el8_10.3
rsyslog-mmnormalizealmalinux 88.2102.0-15.el8_10.3
rsyslog-mmsnmptrapdalmalinux 88.2102.0-15.el8_10.3
rsyslog-mysqlalmalinux 88.2102.0-15.el8_10.3
rsyslog-omamqp1almalinux 88.2102.0-15.el8_10.3
rsyslog-opensslalmalinux 88.2102.0-15.el8_10.3
rsyslog-pgsqlalmalinux 88.2102.0-15.el8_10.3
rsyslog-relpalmalinux 88.2102.0-15.el8_10.3
rsyslog-snmpalmalinux 88.2102.0-15.el8_10.3
rsyslog-udpspoofalmalinux 88.2102.0-15.el8_10.3

CVEs this fix closes

PriorityCVETitleImpactCVSSEPSSExploitation
High CVE-2026-78002 Rsyslog: rsyslog: denial of service via heap buffer overflow in rainerscript replace() function 7.5 0.0106 None reported
High CVE-2026-19654 Rsyslog: a configuration-dependent issue in rsyslog's optional imptcp input module can allow an unauthenticated remote peer to crash rsyslogd 7.5 0.0077 None reported
Showing 1 to 2 of 2 1