{"id":"CLSA-2026-1788262732","summary":"Fix CVE(s): CVE-2026-19654","details":"   * SECURITY UPDATE: denial of service in the optional imptcp module: a regex match at offset zero after oversize-frame recovery submits a negative message length and crashes rsyslogd\n     - debian/patches/CVE-2026-19654.patch: denial of service in the optional imptcp module: a regex match at offset zero after oversize-frame recovery submits a negative message length and crashes rsyslogd\n     - CVE-2026-19654\n   * debian/patches/Skip-tests-that-cannot-run-in-the-build-environment.patch:\n     skip omfile-read-only, omfile-read-only-errmsg, privdropuser and\n     privdropuserid. All four fail in the pdebuild chroot for reasons\n     unrelated to rsyslog (root bypasses the 0400 mode the first two rely\n     on; the chroot has no unprivileged test user for the last two), and\n     they fail identically on the unpatched vendor sources.","modified":"2026-10-26T09:31:53.116227142Z","published":"2026-09-01T11:39:02Z","upstream":["CVE-2026-19654"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/debian10els/CLSA-2026-1788262732.html"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-19654"}],"affected":[{"package":{"name":"rsyslog","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-czmq","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-czmq?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-elasticsearch","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-elasticsearch?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-gnutls","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-gnutls?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-gssapi","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-gssapi?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-hiredis","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-hiredis?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-kafka","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-kafka?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-mongodb","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-mongodb?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-mysql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-mysql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-pgsql","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-pgsql?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}},{"package":{"name":"rsyslog-relp","ecosystem":"TuxCare:Debian:10","purl":"pkg:deb/tuxcare/rsyslog-relp?distro=debian-10"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.1901.0-1+deb10u2+tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1788262732.json"}}],"schema_version":"1.9.0"}