ALAS2023-2026-2133


Amazon Linux 2023 Security Advisory: ALAS2023-2026-2133
Advisory Released Date: 2026-09-14
Advisory Updated Date: 2026-09-14
Severity: Important

Issue Overview:

A flaw was found in rsyslog. An unauthenticated remote attacker can trigger a heap buffer overflow in the RainerScript `replace()` function by sending specially crafted syslog messages. This vulnerability arises from an incorrect buffer size calculation during string replacement, causing memory corruption. Successful exploitation can lead to a denial of service (DoS) for the affected system. (CVE-2026-78002)


Affected Packages:

rsyslog


Issue Correction:
Run dnf update rsyslog --releasever 2023.12.20260914 or dnf update --advisory ALAS2023-2026-2133 --releasever 2023.12.20260914 to update your system.
More information on how to update your system can be found on this page: Amazon Linux 2023 documentation

New Packages:
aarch64:
    rsyslog-mmtaghostname-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-debugsource-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-logrotate-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmnormalize-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-elasticsearch-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmtaghostname-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmaudit-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmfields-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-openssl-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmnormalize-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmaudit-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmkubernetes-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmjsonparse-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmkubernetes-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-elasticsearch-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-crypto-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmjsonparse-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-openssl-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-crypto-debuginfo-8.2204.0-3.amzn2023.0.6.aarch64
    rsyslog-mmfields-8.2204.0-3.amzn2023.0.6.aarch64

noarch:
    rsyslog-doc-8.2204.0-3.amzn2023.0.6.noarch

src:
    rsyslog-8.2204.0-3.amzn2023.0.6.src

x86_64:
    rsyslog-mmjsonparse-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-elasticsearch-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmtaghostname-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmnormalize-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmjsonparse-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmkubernetes-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-debugsource-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-logrotate-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-crypto-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmaudit-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmaudit-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-crypto-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-openssl-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmfields-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-openssl-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmnormalize-debuginfo-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-elasticsearch-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmkubernetes-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmtaghostname-8.2204.0-3.amzn2023.0.6.x86_64
    rsyslog-mmfields-8.2204.0-3.amzn2023.0.6.x86_64