Amazon Linux 2 (EOS) Security Advisory: ALAS2-2026-3904
Advisory Released Date: 2026-09-14
Advisory Updated Date: 2026-09-14
Severity:
Important
Issue Overview:
A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system. (CVE-2026-78002)
Affected Packages:
rsyslog
Note:
This advisory is applicable to Amazon Linux 2 (AL2) Core repository. Visit this FAQ section for the difference between AL2 Core and AL2 Extras advisories.
Issue Correction:
Run yum update rsyslog or yum update --advisory ALAS2-2026-3904 to update your system.
New Packages:
aarch64:
rsyslog-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-crypto-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-elasticsearch-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mmjsonparse-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mmnormalize-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mmaudit-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mmsnmptrapd-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-libdbi-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mysql-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-pgsql-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-gssapi-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-relp-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-gnutls-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-snmp-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-udpspoof-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-kafka-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-mmkubernetes-8.24.0-57.amzn2.2.0.3.aarch64
rsyslog-debuginfo-8.24.0-57.amzn2.2.0.3.aarch64
i686:
rsyslog-8.24.0-57.amzn2.2.0.3.i686
rsyslog-crypto-8.24.0-57.amzn2.2.0.3.i686
rsyslog-elasticsearch-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mmjsonparse-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mmnormalize-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mmaudit-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mmsnmptrapd-8.24.0-57.amzn2.2.0.3.i686
rsyslog-libdbi-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mysql-8.24.0-57.amzn2.2.0.3.i686
rsyslog-pgsql-8.24.0-57.amzn2.2.0.3.i686
rsyslog-gssapi-8.24.0-57.amzn2.2.0.3.i686
rsyslog-relp-8.24.0-57.amzn2.2.0.3.i686
rsyslog-gnutls-8.24.0-57.amzn2.2.0.3.i686
rsyslog-snmp-8.24.0-57.amzn2.2.0.3.i686
rsyslog-udpspoof-8.24.0-57.amzn2.2.0.3.i686
rsyslog-kafka-8.24.0-57.amzn2.2.0.3.i686
rsyslog-mmkubernetes-8.24.0-57.amzn2.2.0.3.i686
rsyslog-debuginfo-8.24.0-57.amzn2.2.0.3.i686
noarch:
rsyslog-doc-8.24.0-57.amzn2.2.0.3.noarch
src:
rsyslog-8.24.0-57.amzn2.2.0.3.src
x86_64:
rsyslog-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-crypto-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-elasticsearch-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mmjsonparse-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mmnormalize-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mmaudit-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mmsnmptrapd-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-libdbi-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mysql-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-pgsql-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-gssapi-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-relp-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-gnutls-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-snmp-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-udpspoof-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-kafka-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-mmkubernetes-8.24.0-57.amzn2.2.0.3.x86_64
rsyslog-debuginfo-8.24.0-57.amzn2.2.0.3.x86_64