Top Tweets for #Rsyslog
CVE-2026-55556 Rsyslog imhttp code execution, CVSS 7.5. Unauthenticated attacker can trigger it via oversized Basic auth headers. Patch still under review, so restrict imhttp exposure now. #CVE #infosec #Rsyslog https://t.co/Auilvwmypb
#Rsyslog #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker
New responsible disclosure workflow armed and up and running in live mode.
Looking at 8 #rsyslog GHSA in parallel. Will the new workflow be able to make this a sustainable and sufficiently quick effort?
Stay tuned if you want to follow the journey.
#infosec #opensource #vulnerabilitymanagement #CVE #AI
Heads-up for #rsyslog 8.2610.0 users who run rulesets with several queue workers: we found and fixed a performance regression. With large JSON trees, CPU use went up about 40% and throughput dropped about 12% compared to 8.2608.0. #Linux #syslog #performance
Maintainer view (#rsyslog): the fix is often the quick part. A hardening PR takes us about 15 minutes. Then the advisory process means days of waiting and coordination before it can ship. So we harden first and ship it in the daily stable build, and keep the classic process for real vulnerabilities.
@jeremiahg @themuscleai CVSS, as currently supported by major players, is an issue. In #rsyslog for example we have high scores especially in old PoC like optional modules which (almost?) nobody uses (at least we never see questions on them)
... you will probably see a ton of #rsyslog CVEs soon as we will begin to request CVE for such things and be it only that we do not get swamped with request, so better find it first.
I still prefer quick hardening PRs
A hardening PR takes 15 minutes, disclosure process takes hours (a bit less with our current automation).
Security audit skills for coding agents are all over GitHub trending right now. Good. But for #rsyslog I found that a generic audit misses what matters most in C: offset and length bugs that span several writes in one function. So we wrote our own skill for the codebase. #AI #AIcoding #security #opensource
@EnclaveRadar to add context: almost no where deploy, it was a years old PoC (#rsyslog maintainer). CSSS rating does not reflect reality in regard to real world impact.
More hardening on #rsyslog main, this time in imuxsock, the module behind the local /dev/log socket. Almost every system uses it, so its socket setup and cleanup should be as robust as possible. #Linux #syslog #security #opensource
OpenSSH shipped a serious password-auth workaround one day after they learned of it. Damien Miller's reason: AI agents rediscover bugs fast, so long embargoes mostly help attackers. That matches how we think about #rsyslog. #opensource #security #Linux
Small packaging step on #rsyslog main: daily stable archives are moving off DigitalOcean Spaces onto our own web server, for cost reasons and to avoid lock-in. Today's merge puts all storage operations behind one script, so the publish jobs no longer talk to S3 directly. #Linux #packaging #DevOps #opensource
@hakman0 @reach_vb Yes, indeed, I am in, but also as defender (so my Mythos). But #Anthropic works much better than #OpenAI for cyber securing me code.
Plus I got the 6-month OSS Ultra promo (OpenAI never cared about #rsyslog...).
An honest one from rsyslog: a queue optimization in 8.2610.0 was a speedup in our lab. In real setups it made some workloads slower: rulesets with several queue workers and large JSON trees use ~40% more CPU and lose ~12% throughput. The fix is in review. #rsyslog #performance #linux
Nice news: #rsyslog just got accepted into the Claude for Open Source Program by @AnthropicAI, with Claude Max 20x for 6 months. 🎉
I'll use it to further strengthen security and to add new features. Having multiple AI agents available is a big plus, also for resilience. Very curious how this works out, and I'll share what I learn. Thanks, Anthropic, for backing open source maintainers! #opensource #AI #ClaudeAI
1/ #rsyslog has scaled well across many cores for about 18 years. But today's machines are even more parallel, and some workloads are extreme. At that point, workers can start competing for the shared queue, so it was time for a tweak. 🧵 #logging #performance
5.6 sol is a beast. And I thought 5.5 is good. Works magically on the pretty complex #rsyslog C code base.
Last Seen Hashtags on Sotwe
Trends for you
Most Popular Users
Elon Musk 
@elonmusk
241M followers
Barack Obama
@barackobama
118.8M followers
Cristiano Ronaldo
@cristiano
114.5M followers
Donald J. Trump
@realdonaldtrump
111.9M followers
Narendra Modi
@narendramodi
107M followers
Rihanna
@rihanna
98.7M followers
NASA
@nasa
92.2M followers
Justin Bieber
@justinbieber
91.8M followers
KATY PERRY
@katyperry
90M followers
Taylor Swift
@taylorswift13
84M followers
Lady Gaga
@ladygaga
75.5M followers
Virat Kohli
@imvkohli
73.4M followers
Kim Kardashian
@kimkardashian
70.8M followers
YouTube
@youtube
68.7M followers
Neymar Jr
@neymarjr
66.4M followers
Bill Gates
@billgates
65.2M followers
Selena Gomez
@selenagomez
63.1M followers
The Ellen Show
@theellenshow
62.2M followers
CNN
@cnn
61.7M followers
X
@x
60.6M followers