diff --git a/SOURCES/rsyslog-8.2102.0-rhbz2157658-imklog.patch b/SOURCES/rsyslog-8.2102.0-rhbz2157658-imklog.patch
new file mode 100644
index 0000000..8e46b35
--- /dev/null
+++ b/SOURCES/rsyslog-8.2102.0-rhbz2157658-imklog.patch
@@ -0,0 +1,20 @@
+diff --git a/plugins/imklog/imklog.c b/plugins/imklog/imklog.c
+index 6c24b5a2db..78cfc3bae2 100644
+--- a/plugins/imklog/imklog.c
++++ b/plugins/imklog/imklog.c
+@@ -453,6 +453,7 @@ ENDactivateCnf
+ 
+ BEGINfreeCnf
+ CODESTARTfreeCnf
++	free(pModConf->pszBindRuleset);
+ ENDfreeCnf
+ 
+ 
+@@ -475,7 +476,6 @@ CODESTARTmodExit
+ 	if(pInputName != NULL)
+ 		prop.Destruct(&pInputName);
+ 
+-	free(runModConf->pszBindRuleset);
+ 	/* release objects we used */
+ 	objRelease(glbl, CORE_COMPONENT);
+ 	objRelease(net, CORE_COMPONENT);
diff --git a/SOURCES/rsyslog.log b/SOURCES/rsyslog.log
index b101e32..db85401 100644
--- a/SOURCES/rsyslog.log
+++ b/SOURCES/rsyslog.log
@@ -7,6 +7,6 @@
     missingok
     sharedscripts
     postrotate
-        /usr/bin/systemctl kill -s HUP rsyslog.service >/dev/null 2>&1 || true
+        /usr/bin/systemctl -s HUP kill rsyslog.service >/dev/null 2>&1 || true
     endscript
 }
diff --git a/SPECS/rsyslog.spec b/SPECS/rsyslog.spec
index 04997b5..642aef2 100644
--- a/SPECS/rsyslog.spec
+++ b/SPECS/rsyslog.spec
@@ -6,7 +6,7 @@
 Summary: Enhanced system logging and kernel message trapping daemon
 Name: rsyslog
 Version: 8.2102.0
-Release: 11%{?dist}
+Release: 13%{?dist}
 License: (GPLv3+ and ASL 2.0)
 Group: System Environment/Daemons
 ExcludeArch: i686
@@ -66,6 +66,7 @@ Patch14: rsyslog-8.37.0-rhbz2081396-CVE-2022-24903.patch
 Patch15: rsyslog-8.2102.0-rhbz2046158-gnutls-broken-connection.patch
 Patch16: rsyslog-8.2102.0-rhbz2124934-extra-ca-files.patch
 Patch17: rsyslog-8.2102.0-rhbz2124934-extra-ca-files-doc.patch
+Patch18: rsyslog-8.2102.0-rhbz2157658-imklog.patch
 
 %package crypto
 Summary: Encryption support
@@ -167,8 +168,8 @@ BuildRequires: postgresql-devel
 Summary: RELP protocol support for rsyslog
 Group: System Environment/Daemons
 Requires: %name = %version-%release
-Requires: librelp >= 1.0.3
-BuildRequires: librelp-devel >= 1.2.16
+Requires: librelp >= 1.9.0
+BuildRequires: librelp-devel >= 1.9.0
 
 %package snmp
 Summary: SNMP protocol support for rsyslog
@@ -308,6 +309,7 @@ mv build doc
 %patch15 -p1 -b .gnutls-error-handling
 %patch16 -p1 -b .extra-ca-files
 %patch17 -p1 -b .extra-ca-files-doc
+%patch18 -p1 -b .imklog-heap
 
 %build
 %ifarch sparc64
@@ -552,6 +554,16 @@ done
 %{_libdir}/rsyslog/omudpspoof.so
 
 %changelog
+* Mon Jan 09 2023 Attila Lakatos <alaktos@redhat.com> - 8.2102.0-13
+- Make rsyslog-relp require librelp>= 1.9.0
+  resolves: rhbz#2029352
+- Reorder logrotate parameters to work with POSIXLY_CORRECT env var
+  resolves: rhbz#2070496
+
+* Fri Jan 06 2023 Attila Lakatos <alakatos@redhat.com> - 8.2102.0-12
+- Fix invalid memory adressing in imklog that could cause abort
+  resolves: rhbz#2157658
+
 * Tue Sep 06 2022 Sergio Arroutbi <sarroutb@redhat.com> - 8.2102.0-11
 - Enable multiple SSL CA files
   resolves: rhbz#2124934