| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: rsyslog-module-mmnormalize | Distribution: SUSE Linux 16 |
| Version: 8.2608.0 | Vendor: SUSE LLC <https://www.suse.com/> |
| Release: 160000.1.1 | Build date: Tue Oct 20 15:43:38 2026 |
| Group: System/Daemons | Build host: reproducible |
| Size: 83424 | Source RPM: rsyslog-8.2608.0-160000.1.1.src.rpm |
| Packager: https://www.suse.com/ | |
| Url: http://www.rsyslog.com/ | |
| Summary: Contains the mmnormalize support module for syslog | |
Rsyslog is an enhanced multi-threaded syslog daemon. See rsyslog package. This module provides log normalizing support.
Apache-2.0 AND GPL-3.0-or-later
* Tue Oct 20 2026 thomas.blume@suse.com
- fix postgresql dependency for devel package (bsc#1286162)
* Wed Oct 14 2026 thomas.blume@suse.com
- VUL-0: rsyslog: RainerScript replace() length wrap (bsc#1285036)
* add 0001-rainerscript-bound-replace-and-wrap-results.patch
* Tue Oct 06 2026 thomas.blume@suse.com
- added new rsyslog (imdtls/omdtls) DTLS modules (jsc#PED-16623)
* Mon Oct 05 2026 thomas.blume@suse.com
- dropped separate tarball for rsyslog-doc, now included in main sources
(https://www.rsyslog.com/downloads/download-v8-stable/)
- dropped patches:
0001-rsyslogd-fix-rsyslog-mmpstrucdata-stack-overflow.patch
0001-imptcp-guard-regex-framing-match-at-line-start.patch
0001-gtls-guard-early-debug-level-lookup.patch
0001-fix-RainerScript-replace-heap-buffer-overflow.patch
* replaced by 0001-rainerscript-align-replace-sizing-rewind.patch
(CVE-2026-78002 bsc#1275926)
0001-imdtls-fix-permitted-peer-authorization-bypass.patch
* replaced by 0001-imdtls-reject-clients-that-fail-peer-verification.patch
(bsc#1281628)
- upgrade to rsyslog 8.2608.0 (bsc#1257604)
* 2026-08-18: imbeats: rearm listener after failed TLS accept
* 2026-08-18: msg: serialize turbo snapshot duplication
* 2026-08-18: omfile: harden dynafile default containment (CVE-2026-92709 bsc#1286926)
* 2026-08-18: fixup! omfwd: support PKCS#11 URIs with ossl TLS
* 2026-07-02: omfwd: support PKCS#11 URIs with ossl TLS
* 2026-07-21: mmkubernetes: reload SA token proactively and on HTTP 401
* 2026-08-17: devtools: remove Cubic from local validation
* 2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount
* 2026-08-11: tcpsrv: synchronize session table slots
* 2026-08-11: imrelp: preserve errno across stop signal
* 2026-08-12: examples.rst: Missing space in template
* 2026-08-10: mmnormalize: merge debug metadata
* 2026-08-08: normalizers: complete debug test gating
* 2026-08-08: normalizers: complete debug integration
* 2026-08-07: mmnormalize, pmnormalize: add liblognorm debugging
* 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead of crashing
* 2026-08-07: runtime: make error-message flag atomic
* 2026-07-24: fuzz: exercise RFC 3164 and RFC 5424 parsers
* 2026-08-05: build: unify indentation in AC_CONFIG_FILES list
* 2026-07-25: imfile: fix delay.message microsecond conversion
* 2026-07-24: diskqueue: reject symlinked persisted segments
* 2026-06-23: omfile: control symlink following
* 2026-07-25: mmnormalize: make HUP reload worker-safe
* 2026-07-24: docs(agents): add Cursor Cloud environment setup notes
* 2026-07-22: imbeats: harden Lumberjack input resource handling
* 2026-07-23: stringbuf: harden empty string replacement
* 2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654 bsc#1271910)
* 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the done: label
* 2026-07-21: queue: preserve DA child work during shutdown
* 2026-07-21: imtcp: release completed zlib decoder state
* 2026-07-09: doc: clarify JSON array rendering
* 2026-07-21: Potential fixes for 5 code quality findings (#7397)
* 2026-07-20: ratelimit: optimize port-based per-source keys
* 2026-07-20: imtcp: make zstd window budget configurable
* 2026-07-19: imtcp: use snake case for zstd window tracking
* 2026-07-17: imtcp: bound aggregate zstd decoder window memory
* 2026-07-20: statsobj: guard Prometheus escape writes
* 2026-07-18: config: do not instantiate actions disabled via config.enabled="off"
* 2026-07-15: queue: document DA engine internals
* 2026-07-14: msg: enforce source-property helper contract
* 2026-07-10: ratelimit: remove per-source key policy hot lock
* 2026-07-08: ratelimit: speed source-key shortcuts
* 2026-07-15: queue: clarify DA transfer worker role
* 2026-07-18: compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback
* 2026-07-18: rainerscript: warn on constant AND/OR operand at parse time
* 2026-07-18: configure: include <stddef.h> in the STAILQ detection test
* 2026-07-17: mmnormalize: share Turbo CEE root path check
* 2026-07-17: mmnormalize: fall back after Turbo materialization failure
* 2026-07-17: mmnormalize: preserve turbo results across message boundaries
* 2026-07-17: benchmarks: harden comparison and helper inputs
* 2026-07-16: segdisk: optimize CRC accounting and add benchmarks
* 2026-07-15: imjournal: stop invalidation reopen busy-loop
* 2026-07-14: queue: harden segmented DA lifecycle invariants
* 2026-07-14: queue: harden DA portability and startup cleanup
* 2026-07-14: queue: address segmented DA review findings
* 2026-07-14: queue: stabilize DA shutdown and reload state
* 2026-07-14: queue: clarify lazy marker and legacy state paths
* 2026-07-14: queue: gate idle cleanup on durable intent
* 2026-07-14: queue: document empty DA marker replacement
* 2026-07-14: queue: preserve classic state on transient load errors
* 2026-07-14: queue: make idle cleanup restoration crash safe
* 2026-07-14: queue: fail classic DA startup on real errors
* 2026-07-14: queue: clarify dirty DA configuration handling
* 2026-07-14: queue: separate DA idle and worker timeouts
* 2026-07-14: queue: document DA auto-upgrade boundary
* 2026-07-14: queue: publish fresh DA markers on first spill
* 2026-07-14: queue: constrain classic DA startup fallback
* 2026-07-14: queue: clarify disabled DA idle timeout
* 2026-07-14: queue: preserve classic DA startup fallback
* 2026-07-14: doc: describe segmented disk-assisted queues
* 2026-07-14: queue: add segmented disk-assisted engine
* 2026-07-14: queue: retain adopted recovery frontier
* 2026-07-14: queue: address segmented disk review findings
* 2026-07-13: queue: wake workers before capacity waits
* 2026-07-13: queue: make segmented deletion resumable
* 2026-07-13: queue: initialize missing state in empty spool dirs
* 2026-07-13: queue: reject invalid segmented codec field types
* 2026-07-13: queue: avoid sanitized generation wrap
* 2026-07-13: queue: expose segmented disk durability test hooks
* 2026-07-13: queue: make segmented disk recovery lazy
* 2026-07-09: queue: rework experimental segmented disk backend
* 2026-07-08: imjournal: warn when failing to get the MESSAGE field
* 2026-07-08: omawslogshlc: add CloudWatch Logs HLC output module
* 2026-07-08: core: add systemd READY delay opt-in
* 2026-06-02: core/imfile: synchronize sd_notify READY=1 with module startup
* 2026-07-07: ratelimit: shard per-source state
* 2026-07-06: docs: validate marked config samples
* 2026-07-07: ratelimit: shard named config registry
* 2026-07-06: runtime: harden ratelimit per-source reload
* 2026-07-06: queue: align legacy action batch default
* 2026-07-06: runtime: relax worker-count log reads
* 2026-07-06: core: relax selected atomic flag reads
* 2026-07-06: omkafka: relax poll stop flag atomics
* 2026-07-06: doc: add documentation for imfile delay.message parameter
* 2026-06-04: core: add generic output rate limiting
* 2026-07-05: omelasticsearch: apply TLS options during detection
* 2026-06-24: omprog: pace transaction retry resumes
* 2026-07-02: runtime: add relaxed 32-bit atomic helpers
* 2026-07-02: runtime: fix uint64 atomic fallback return
* 2026-07-02: net: match legacy allowed sender hostname handling
* 2026-07-02: runtime: modernize atomic helper usage
* 2026-07-02: net: add modern allowedSender ACLs
* 2026-07-02: queue: keep DA child workers alive while idle
* 2026-07-01: runtime: add atomic read load helpers
* 2026-07-01: rainerscript: align hex escape lexer states
* 2026-06-30: rainerscript: accept hex object string escapes
* 2026-06-30: runtime: synchronize action retry shutdown state
* 2026-06-30: mmutf8fix: fix replacement sequence examples
* 2026-06-16: parser: preserve first sanitize offset with SpaceLF
* 2026-06-29: template: avoid new legacy octal escape
* 2026-06-29: Make imptcp-epoll-add-failure.sh Linux-only
* 2026-06-29: Use check_LTLIBRARIES to generate liboverride_* test libraries
* 2026-06-29: doc: correct tcp_user_timeout version marker
* 2026-06-23: omhttp: continue after permanent data failures
* 2026-06-28: ommail: harden subject template header output
* 2026-06-28: omprog/omstdout: guard empty template LF checks
* 2026-06-23: tcp: skip legacy z after stream decode
* 2026-06-26: omelasticsearch: escape bulk metadata values
* 2026-06-24: imtcp: bound zstd decoder window
* 2026-06-24: mmkubernetes: add kubernetesurl failover
* 2026-06-26: docs: add v8-stable patch-flow skill to stable branch
* 2026-06-26: impcap: bound-check ARP address lengths
* 2026-06-26: Initialize devcontainer option state
* 2026-06-26: Remove obsolete Ubuntu 18.04 dev containers
* 2026-06-26: Refresh dev container cleanup
* 2026-06-26: agent: add v8-stable patch flow skill
* 2026-06-26: ChangeLog: split include-glob follow-up
* 2026-06-26: config: keep empty include globs silent
* 2026-06-26: gtls: harden DNS SAN byte handling
* 2026-06-25: Codify timeoutGuard testbench invariant
* 2026-06-26: imhttp: enforce gzip request body limit
* 2026-06-24: imhttp: defensive fixes and auth fallback correction
* 2026-06-25: doc/release: prevent invalid release version manual change
* 2026-06-24: omelasticsearch: add tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups
* 2026-06-24: input: warn for rulesets without queues
* 2026-06-24: ommongodb: preserve ISODate fractional seconds
* 2026-06-24: imuxsock: clarify missing Socket diagnostics
* 2026-06-24: rsyslogd: reject -o output over input config
* 2026-06-24: template: add timereceived property alias
* 2026-06-24: imudp: store received sockaddr length
* 2026-06-23: imfile: warn on duplicate file monitors
* 2026-06-24: omudpspoof: stop retrying failed fragments
* 2026-06-23: gtls: guard early debug-level lookup (bsc#1274610)
* 2026-06-23: statsobj: handle lock control failures
* 2026-06-23: build: avoid empty usertools install dirs
* 2026-06-23: imdocker: recover from stale since anchors
* 2026-06-23: tcpflood: add GnuTLS priority string option
* 2026-06-23: imjournal: add journal namespace support
* 2026-06-23: prepare for next scheduled stable release cycle
* 2026-06-23: doc: clarify omprog transaction mode status
* 2026-06-23: errmsg: enrich oversize errorfile records
* 2026-06-23: omelasticsearch: retry read-only bulk failures
* 2026-06-23: doc: clarify fromhost case handling
* 2026-06-23: doc: clarify ommysql data failures
* 2026-06-23: omuxsock: isolate action socket locks
* 2026-06-16: template: add octal control character escape
* 2026-06-16: omfwd: add TCP user timeout action option
* 2026-06-15: mmutf8fix: support replacement sequences
* 2026-06-09: [Modernization] Replace Internal Backticks with Shell Expansion: Rscript Batch 1
* 2026-06-08: diag.sh: fix content-pattern-check and assert-first-column-sum-greater-than
* 2026-06-23: imtcp: add stream compression support
* 2026-06-23: docs: add queue-full troubleshooting
* 2026-06-22: mmpstrucdata: document structured-data buffer invariant
* 2026-06-21: doc: refine object terminator wording
* 2026-06-21: doc: clarify security release handling
* 2026-06-21: doc: clarify RainerScript semicolon use
* 2026-06-20: rainerscript: escape embedded NULs at C-string boundary
* 2026-06-20: doc: explain service sandboxing for helpers
* 2026-06-20: doc: address service sandboxing review
* 2026-06-20: Apply suggested fix to tools/pmrfc3164.c from Copilot Autofix
* 2026-06-19: rainerscript: fold constant comparisons
* 2026-06-18: doc: clarify partial config validation
* 2026-06-18: config: warn on constant boolean operands
* 2026-06-17: parser: honor parseHostnameAndTag in RFC3164 parser
* 2026-06-17: core: fix negated exact priority filters
* 2026-06-16: rainerscript: keep random result non-negative
* 2026-06-16: rainerscript: add cbool function
* 2026-06-16: pmrfc3164: honor parseHostnameAndTag at runtime
* 2026-06-16: msg: invalidate programname when tag changes
* 2026-06-16: imfile: deliver same-file monitors independently
* 2026-06-16: glbl: keep debug logfile notice informational
* 2026-06-16: doc: modernize GELF forwarding tutorial
* 2026-06-15: ommail: add SMTP mode test
* 2026-06-15: mmjsonparse: modernize test output paths
* 2026-06-14: parser: add optional trailing CR stripping
* 2026-06-14: ompgsql: accept long server hostnames
* 2026-06-14: dynstats: warn on duplicate bucket names
* 2026-06-14: action: warn on duplicate action names
* 2026-06-13: omfwd: use matching atomic mutex helper
* 2026-06-08: Merge pull request #7014 from rsyslog/cursor/critical-correctness-bugs-480c
* 2026-06-05: omazureeventhubs docs: fix underscored parameters
* 2026-06-04: runtime: fix YAML promotion OOM ownership
* 2026-06-04: omuxsock docs: correct template parameter
* 2026-06-04: omhttp: own Splunk profile template names
* 2026-06-04: mmjsonparse: reject boundary trailing data
* 2026-06-04: mmdblookup: preserve uint64 values
* 2026-06-04: mmdblookup: check uint64 fallback formatting
* 2026-06-04: impstats docs: fix dotted log parameters
* 2026-06-04: impstats docs: clarify parameter name guidance
* 2026-06-04: imkafka: stop workers on startup failure
* 2026-06-04: imkafka: refine startup stop flag handling
* 2026-06-04: doc: match Sphinx duplicate CLI override handling
* 2026-06-04: doc: keep stable git docs out of dev mode
* 2026-06-04: doc: format stable rst_prolog metadata
* 2026-06-04: doc: fix database tutorial SQL template option
* 2026-06-03: regexp: avoid per-thread shutdown double-free
* 2026-06-03: omkafka: fix NULL topic and add action name to onDestroy flush logs
* 2026-06-03: mmsnareparse: honor searchWindow in tabbed trailing scan
* 2026-06-03: mmsnareparse: cap tab trailing search by token
* 2026-06-03: imfifo: guard absent module config paths
* 2026-06-03: imfifo: bind instances to module config
* 2026-06-03: imdiag: fix stats reporting gate
* 2026-06-03: imdiag: avoid checked cond signal while locked
* 2026-06-03: docker: gate collector imtcp module
* 2026-06-03: docker: derive single imtcp enable switch
* 2026-06-03: docker: default derived imtcp switch in collector
* 2026-06-02: yamlconf: clean up include recursion guard
* 2026-06-02: tls: propagate wolfSSL send-side read retry
* 2026-06-02: tls: keep wolfSSL send retry local
* 2026-06-02: tls: bound wolfSSL send-side read retries
* 2026-06-02: sidecar: cap UDP burst buffer by total bytes
* 2026-06-02: runtime: include limits.h for INT_MAX in yamlconf
* 2026-06-02: runtime: guard against recursive YAML includes
* 2026-06-02: runtime/queue: reset sizeOnDisk after safe recovery
* 2026-06-02: rainerscript: accept optimizer NOP statements
* 2026-06-02: omkafka: fix HUP deadlock when doAction holds mut_doAction (#7129)
* 2026-06-02: omhttp: avoid retry-ruleset self-stall
* 2026-06-02: omhiredis: fix TLS context error log
* 2026-06-02: mmpstrucdata: support custom SD containers (CVE-2026-61548 bsc#1272414)
* 2026-06-02: mmjsonparse: fix find-json ownership and scan bounds
* 2026-06-02: mmjsonparse: clear JSON pointer after ownership transfer
* 2026-06-02: devtools: fold local review experiment into planner
* 2026-06-01: translate: cover script serialization (#7152)
* 2026-06-01: dev_env: include lcov in Ubuntu coverage images
* 2026-06-01: ChangeLog: update 8.2606 entries
* 2026-06-01: Add parse_time_localtz with documentation
* 2026-05-31: runtime: join final worker after shutdown wait
* 2026-05-31: runtime: harden raw message replacement growth
* 2026-05-31: runtime: fix $!all-json serialization locking
* 2026-05-31: ratelimit: centralize per-source enforcement
* 2026-05-31: parser: fix NetAddr cleanup on mask parse errors
* 2026-05-31: omclickhouse: report HTTP response errors
* 2026-05-31: omclickhouse: document SQL template option
* 2026-05-31: omclickhouse: clean up JSON root on OOM
* 2026-05-31: action: avoid committing suspended retry batches
* 2026-05-31: Keep transactional action queue messages on shutdown
* 2026-05-30: rainerscript: add tocef() and cef_ext_escape() for CEF output
* 2026-05-30: doc: clarify queue crash durability limits
* 2026-05-30: devtools: add read-only C format check
* 2026-05-29: tls: propagate send-side receive retry
* 2026-05-29: tls: preserve send-side receive retry state
* 2026-05-29: tls: preserve send retry without reconnect
* 2026-05-29: tls: keep wolfSSL send-side retry local
* 2026-05-29: tls: keep send-side read retries local
* 2026-05-29: template: apply style-check formatting
* 2026-05-29: style: format msg replacement tests
* 2026-05-29: runtime: fix msg replace helper CI failures
* 2026-05-29: omkafka: fix suspension not triggered on host resolution failure
* 2026-05-29: omfwd: schedule retry for deferred TCP flush
* 2026-05-29: omfwd: preserve connection on retryable TLS sends
* 2026-05-29: omfwd: avoid tcpclt leak on rebind
* 2026-05-29: mmsnareparse: preserve regex end-anchor semantics
* 2026-05-29: imudp: validate listen port formatting
* 2026-05-29: imudp: harden listen port file writes
* 2026-05-29: imptcp: simplify compression auto probe
* 2026-05-29: imkafka: support multiple topics in one input() instance
* 2026-05-29: imjournal: warn when newest entry is in the future
* 2026-05-29: imjournal: handle clock jumps in future probe
* 2026-05-29: docs: strengthen GHSA prompt guardrails
* 2026-05-29: add func doFunct_ParseTimeLocalTz
* 2026-05-29: Update doc/security/ghsa-coordination-review-template.md
* 2026-05-29: Fix rawmsg suffix shift on realloc
* 2026-05-29: Fix msg replacement and JSON set handling
* 2026-05-29: Apply suggested fix to tests/mmexternal-response-too-long.sh from Copilot Autofix
* 2026-05-28: tls: keep send retry state internal
* 2026-05-28: template: reject invalid regex match selectors
* 2026-05-28: template: guard NULL property rendering
* 2026-05-28: packaging: use ETL Vespa env defaults directly
* 2026-05-28: packaging: default ETL TLS envs in entrypoint
* 2026-05-28: omelasticsearch: apply clang-format to version probe error
* 2026-05-28: mmjsontransform: fix dotted conflict ownership
* 2026-05-28: mmexternal: fix single-instance reply handling
* 2026-05-28: mmexternal: fix EINTR reply handling
* 2026-05-28: mmdblookup: clean up failed worker creation
* 2026-05-28: imuxsock: handle embedded NUL datagrams safely
* 2026-05-28: imptcp: harden auto compression probe
* 2026-05-27: tls: preserve recv data during send-side reads
* 2026-05-27: tls: avoid recv-helper misuse in send WANT_READ
* 2026-05-27: tls: avoid receive retry state during send
* 2026-05-27: template: fix jsonftree flat fallback framing
* 2026-05-27: runtime: reject embedded NULs in mbedtls cert names
* 2026-05-27: runtime: initialize ratelimit mutex once
* 2026-05-27: runtime: guard per-thread regexp iterator allocation
* 2026-05-27: runtime: fix fromhost-port extraction before rcvFrom union swap
* 2026-05-27: runtime: clean up DNS props on port allocation failure
* 2026-05-27: runtime-format-regexp-lifecycle-guards
* 2026-05-27: regexp-clean-up-per-thread-entries
* 2026-05-27: packaging: expose Vespa HTTPS toggles
* 2026-05-27: packaging: enable HTTPS by default for ETL Vespa output
* 2026-05-27: omusrmsg: enable thread-safe action ratelimiter
* 2026-05-27: omotel: use getProgramName() when deriving app name
* 2026-05-27: omotel: avoid const cast for app name extraction
* 2026-05-27: ommysql: handle closed connection before commit
* 2026-05-27: omkafka: harden failed delivery replay paths
* 2026-05-27: omhttp: refresh health-check headers after gzip rebuild
* 2026-05-27: omhttp: keep health-check headers uncompressed
* 2026-05-27: omelasticsearch: bound startup version probe response size
* 2026-05-27: mmsnareparse: skip full digit runs in event probe
* 2026-05-27: mmsnareparse: preserve anchored trailing regex matches
* 2026-05-27: mmsnareparse: cap regex input in trailing token
* 2026-05-27: mmsnareparse: avoid quadratic provider scans in snare probe
* 2026-05-27: mmjsontransform: fix child ownership on dotted merge conflicts
* 2026-05-27: mmjsontransform: clean up dotted insert ownership
* 2026-05-27: mmanon: remove assert on malformed embedded IPv4
* 2026-05-27: mmanon: make random suffix generation fully reachable
* 2026-05-27: mmanon: build random suffix from byte chunks
* 2026-05-27: mbedtls-refine-nul-name-checks
* 2026-05-27: mbedtls-apply-cert-name-style
* 2026-05-27: lookup: report active table reloads as pending
* 2026-05-27: lmsig-ksi-bound-debug-precision
* 2026-05-27: imptcp: serialize helper work per session
* 2026-05-27: imptcp: add stream:auto compression mode
* 2026-05-27: imfifo: implement named pipe input module (#7029)
* 2026-05-27: dynstats: coalesce pending persistence writes per bucket
* 2026-05-27: dynstats-unlock-on-task-alloc-failure
* 2026-05-27: docker: fix clickhouse configure flag in Debian 13 dev image
* 2026-05-27: doc: use literal markup for TLS parameters
* 2026-05-27: doc: fix shutdown.enable.ctlc spelling in rsyslogd man page
* 2026-05-27: doc: fix mmrfc5424addhmac sd_id parameter name
* 2026-05-27: doc: clarify mbedtls requires StreamDriverMode=1 for TLS
* 2026-05-27: configure: detect relpCltSetKeepAlive support
* 2026-05-26: stats: avoid notifier teardown deadlocks
* 2026-05-26: runtime: guard optional regexp object lifecycle in tcp server
* 2026-05-26: runtime: bound KSI debug record logging by length
* 2026-05-26: runtime: avoid regexp unload double free
* 2026-05-26: ratelimit: avoid double free on helper error paths
* 2026-05-26: perctile: reuse counter cleanup helper
* 2026-05-26: perctile: link buckets after initialization
* 2026-05-26: ossl: avoid caching OCSP responses past nextUpdate
* 2026-05-26: omazuredce: bound HTTP response buffering
* 2026-05-26: omazuredce: avoid gzip buffer underallocation
* 2026-05-26: omazuredce-review-followup
* 2026-05-26: imuxsock: enforce ratelimit.name for credentialed senders
* 2026-05-26: imuxsock-ratelimit-credential-followup
* 2026-05-26: impstats: fix double-free in remote write batching cleanup
* 2026-05-26: imkafka: cap split.json.records fan-out
* 2026-05-26: imdocker: keep stream alive on rate-limit drops
* 2026-05-26: imdocker: bound multiline segment compaction
* 2026-05-26: imdocker: apply clang-format output
* 2026-05-26: configure: avoid leaking -lgcrypt into global LIBS
* 2026-05-25: shellcheck: fix masked test assignments
* 2026-05-25: runtime: validate numeric hardening inputs
* 2026-05-25: runtime/nsd_gtls: validate IP SAN length before conversion
* 2026-05-25: parser: verify and fix offAfterPRI calculation
* 2026-05-25: omhiredis: derive TLS server name from server config
* 2026-05-25: omfwd: require peers for targetSrv TLS name auth
* 2026-05-25: omfwd: clarify targetSrv TLS auth error
* 2026-05-25: nsd_gtls: preserve SAN-present state for malformed IP SAN
* 2026-05-25: imhttp: write bound listener port to file
* 2026-05-25: imdtls: write bound listener port to file
* 2026-05-25: fix(imhiredis): default TLS peer name to configured server
* 2026-05-24: tools: make AIX SRC reply copy bounded
* 2026-05-24: statsobj: clear lock flag after prometheus unlock
* 2026-05-24: runtime: clamp emulated RFC5424 tag length
* 2026-05-24: runtime: avoid post-fork malloc in execProg
* 2026-05-24: runtime/statsobj: lock stats list during iteration
* 2026-05-24: nsd_mbedtls: reject RemoteSNI and wire interface
* 2026-05-24: nsd_mbedtls: fill remote port interface methods
* 2026-05-24: mmjsontransform: track per-insert conflicts
* 2026-05-24: mmjsontransform: avoid leak on policy insert conflict
* 2026-05-24: mmjsonparse: avoid json double-free on add failure
* 2026-05-24: mmexternal: avoid undrained stdout/stderr pipe in output=none mode
* 2026-05-24: mmexternal: address output pipe review findings
* 2026-05-24: impstats: harden overwrite temp file creation
* 2026-05-24: imjournal: treat rate-limit discards as non-fatal in readjournal
* 2026-05-24: gssapi: use uint32_t for token wire length
* 2026-05-24: gssapi: fix token length framing endianness in sender
* 2026-05-24: fix(tools): guard AIX SRC reply text against NULL
* 2026-05-23: rainerscript: fix array and numeric comparisons on JSON vars
* 2026-05-23: privdrop: update privilege drop comments
* 2026-05-23: privdrop: log capability context on drop failure
* 2026-05-23: omelasticsearch: guard dynamic template strings
* 2026-05-23: omelasticsearch: cache action template count
* 2026-05-23: imjournal: restore cursor after recovery reopen
* 2026-05-23: imjournal: recover from stale saved cursor
* 2026-05-23: imjournal: harden journal invalidation recovery
* 2026-05-23: imjournal: avoid rotation accounting during recovery
* 2026-05-23: docs: clarify local validation gates
* 2026-05-23: contrib, runtime: defensive stability and robustness hardening
* 2026-05-23: codex: wire local container testing hook into agent workflow
* 2026-05-22: shell: clean up ShellCheck findings
* 2026-05-22: python: clean up style and add optional checks
* 2026-05-22: net_ossl: document SAN-priority hard-stop on old API
* 2026-05-22: msg: guard MSG replacement offsets (bsc#1272414)
* 2026-05-22: mmexternal: support one-way helpers and response timeouts
* 2026-05-22: imptcp: unlink failed accepted sessions
* 2026-05-22: imjournal: fix double-free hazards on JSON objects
* 2026-05-22: imfile: add line-number metadata and soften empty checks
* 2026-05-22: imdocker: terminate compacted multiline buffers
* 2026-05-22: imbeats: harden pointer transfer in submitEvent
* 2026-05-22: contrib, plugins: refine pointer hand-off in imhiredis, mmjsonparse, mmsequence
* 2026-05-22: contrib, plugins: defensive pointer hand-off hardening
* 2026-05-22: config: warn for unmatched include globs
* 2026-05-22: agents: document optional local linters
* 2026-05-21: template: harden property rendering bounds
* 2026-05-21: tcpsrv: guard listener destructors against NULL references
* 2026-05-21: tcps_sess: secure regex memory reallocation and destructor
* 2026-05-21: style: format wolfSSL CRL helper
* 2026-05-21: ruleset: guard synchronous recursive calls
* 2026-05-21: rainerscript: harden string and JSON bounds
* 2026-05-21: pm/fm: defensively harden parsing edge cases
* 2026-05-21: ossl: enable wolfSSL CRL checks for DER files
* 2026-05-21: net_ossl: avoid CN fallback when SAN priority unsupported
* 2026-05-21: mmgrok: keep configured source immutable
* 2026-05-21: lookup: harden shutdown lifecycle
* 2026-05-21: imudp: harden thread lifecycles and fix stats memory leak
* 2026-05-21: imtcp: harden listener setup and legacy config cleanup
* 2026-05-21: imjournal: defensive memory safety and stability hardening
* 2026-05-21: docs: codify GHSA coordination workflow
* 2026-05-21: docs: clarify GHSA triage scope
* 2026-05-21: docs: add distro component package map
* 2026-05-21: docs: add GHSA coordination template
* 2026-05-21: contrib: harden buffer and parser bounds handling
* 2026-05-21: agent: document local CI preflight tiers
* 2026-05-21: Update tests/imptcp_uds_unlink.sh
* 2026-05-21: Apply suggested fix to tests/imptcp_uds_unlink.sh from Copilot Autofix
* 2026-05-20: ossl: bound OCSP network reads
* 2026-05-20: mmanon: defensively harden IP suffix parsing
* 2026-05-20: lookup: reject duplicate table names
* 2026-05-20: imptcp: harden concurrency, boundaries, and memory safety
* 2026-05-20: gtls: log peer IP for missing client cert
* 2026-05-20: config: add global maxOpenFiles setting
* 2026-05-20: build: fix ARMv7 warnings under Werror
* 2026-05-20: agents: add ChangeLog maintenance skill
* 2026-05-20: Update tests/imptcp-discard-truncated-msg-same-session.sh
* 2026-05-20: ChangeLog: update 8.2606 entries
* 2026-05-20: Apply suggested fix to tests/imptcp-discard-truncated-msg-same-session.sh from Copilot Autofix
* 2026-05-20: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix
* 2026-05-19: imptcp: discard oversize byte after truncation
* 2026-05-18: tcp: log pre-truncated oversize frames
* 2026-05-18: runtime: avoid libgcry IV shift UB
* 2026-05-18: grammar: read pseudo-files in backtick cat
* 2026-05-18: docker: add container regex noise filter
* 2026-05-18: doc: remove unavailable StdJSONFmt reference
* 2026-05-18: agents: require available container validation
* 2026-05-18: agents: clarify PR babysitting decisions
* 2026-05-18: ChangeLog: remove duplicate release blocks
* 2026-05-18: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix
* 2026-05-17: omelasticsearch: document error-file modes
* 2026-05-17: doc: list RFC5424 reserved template
* 2026-05-17: doc: clarify omfile timed flush behavior
* 2026-05-17: doc: clarify omfile legacy action separation
* 2026-05-17: containers: update libyaml dev image dependencies
* 2026-05-17: containers: remove stale dev images
* 2026-05-17: containers: enable libyaml in Fedora dev images
* 2026-05-17: containers: enable libyaml in CentOS and Debian CI
* 2026-05-17: build: honor cross pkg-config for libgcrypt
* 2026-05-16: devcontainer: remove anonymous helper volumes
* 2026-05-16: configure: make libyaml default-on explicit
* 2026-05-16: agents: clarify test intent comment rule
* 2026-05-15: ommail: add sendmail delivery mode
* 2026-05-15: omelasticsearch: warn on searchType use
* 2026-05-15: imdiag: add module-only modern config
* 2026-05-15: agents: clarify PR babysitting stop condition
* 2026-05-15: agents: add issue triage skill
* 2026-05-15: Potential fixes for 2 code quality findings (#6909)
* 2026-05-14: skills: clarify container validation escalation
* 2026-05-14: omfile: reject failed dynafile pre-opens
* 2026-05-14: net_ossl: fix clang-format style in CRL warning
* 2026-05-14: java: use nio writer in simple plugin skeleton
* 2026-05-14: imuxsock: reject contradictory socket ownership
* 2026-05-14: imfile: recover more inotify file updates
* 2026-05-14: Update .agent/skills/rsyslog_test/SKILL.md
* 2026-05-13: runtime: add STAILQ fallback for AIX
* 2026-05-13: net_ossl: fix CRL stack leak when cert store is NULL
* 2026-05-13: narrow CODEOWNERS ownership
* 2026-05-13: imdiag: add injectmsg delay option
* 2026-05-13: devcontainer: quote git common dir mount
* 2026-05-13: agents: document local overlay lookup
* 2026-05-13: From: Jérémie Jourdin <jeremie.jourdin@advens.fr> Subject: queue: add per-queue size.enqueued counter (cumulative bytes)
* 2026-05-12: omrelp: allow TLS auth failure suspension
* 2026-05-12: imbeats: multiplex sessions for high client counts
* 2026-05-12: imbeats: harden batch parsing limits
* 2026-05-12: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix
* 2026-05-12: Apply suggested fix to tests/imptcp-NUL.sh from Copilot Autofix
* 2026-05-11: runtime: harden atomic helper fallbacks
* 2026-05-11: packaging/rpm: add rsyslog-imbeats subpackage
* 2026-05-11: java: harden skeleton file handling
* 2026-05-11: imbeats: verify raw and amended ES pipeline
* 2026-05-11: imbeats: track cumulative Lumberjack sequences
* 2026-05-11: imbeats: tolerate interrupted poll calls
* 2026-05-11: imbeats: test Filebeat to Elasticsearch pipeline
* 2026-05-11: imbeats: harden compressed frame parsing
* 2026-05-11: imbeats: add Elastic Beats input module
* 2026-05-11: imbeats: add Elastic Agent Windows fixture test
* 2026-05-11: Apply suggested fix to tools/ompipe.c from Copilot Autofix
* 2026-05-11: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix
* 2026-05-11: Apply suggested fix to runtime/atomic.h from Copilot Autofix
* 2026-05-11: Apply suggested fix to doc/ai/security_triage_rubric.md from Copilot Autofix
* 2026-05-10: imuxsock: harden trusted property annotation buffer
* 2026-05-10: immark: harden runtime config lifetime
* 2026-05-10: doc: add security triage rubric for AI agents
* 2026-05-10: [HARDENING] imjournal: harden disk usage stats update
* 2026-05-10: [HARDENING] imdiag: clarify controlled diagnostics usage
* 2026-05-09: hardning: harden config parameter ownership and OOM cleanup
* 2026-05-09: config: add compatibility controls and secure defaults
* 2026-05-08: rosi-collector: prevent Loki 400 queue stalls
* 2026-05-08: omdtls: check config string allocations
* 2026-05-08: mmrfc5424addhmac: harden SD-ID handling
* 2026-05-08: mmleefparse: check config string allocations
* 2026-05-08: imbeats: join session threads during teardown
* 2026-05-08: Fix chkseq EOF handling
* 2026-05-07: python: make file cleanup lexical
* 2026-05-07: python: fix external plugin comment typos
* 2026-05-07: python: close script file handles
* 2026-05-07: imudp: add dynamic listen port files
* 2026-05-07: impstats: remove obsolete svg jquery asset
* 2026-05-07: doc: harden docs config AI fixes
* 2026-05-07: devcontainer: allow sudo for mapped users
* 2026-05-07: Update doc/source/conf_helpers.py
* 2026-05-07: Fix operator precedence in conditions
* 2026-05-07: Apply suggested fix to tests/omfwd-lb-1target-retry-test_skeleton-TargetFail.sh from Copilot Autofix
* 2026-05-07: Apply suggested fix to tests/chkseq.c from Copilot Autofix
* 2026-05-07: Apply suggested fix to doc/source/conf_helpers.py from Copilot Autofix
* 2026-05-06: scripts: restore repo policy helpers
* 2026-05-06: scripts: align module policy evaluator name
* 2026-05-06: net_ossl: support CRL/OCSP revocation on wolfSSL
* 2026-05-06: java: simplify simple plugin file creation
* 2026-05-06: impstats: clean up svg jquery findings
* 2026-05-06: impstats: avoid analyzer wildcard import
* 2026-05-06: doc: import optional extensions during probe
* 2026-05-06: doc: broaden optional extension probe errors
* 2026-05-06: doc: avoid unused python imports
* 2026-05-06: Apply suggested fix to packaging/docker/rsyslog/standard/Dockerfile from Copilot Autofix
* 2026-05-05: ratelimit: preserve severity sentinel on s390x
* 2026-05-05: imtcp: wait for mbedtls diagnostics in tests
* 2026-05-05: imtcp test: capture mbedtls diagnostics directly
* 2026-05-05: Add Ubuntu WSL development setup
* 2026-05-04: improg: stop on child stdout EOF
* 2026-05-04: github action: remove issue labler
* 2026-05-04: codeql: silence unused global findings
* 2026-05-04: codeql: add explicit Python fallbacks
* 2026-05-04: Apply suggested fix to runtime/datetime.c from Copilot Autofix
* 2026-04-30: ossl: match PermittedPeer wildcards against cert identities
* 2026-04-30: Fix omrelp TLS auth failure CPU spin
* 2026-04-29: packaging/rpm: Add omotel OpenTelemetry Sub-package
* 2026-04-28: packaging: add multi-arch container release publishing
* 2026-04-28: Fix RFC3339 formatting for high-precision secfrac
* 2026-04-25: queue: quarantine runtime disk corruption safely
* 2026-04-25: imfile test: stabilize async logrotate drain
* 2026-04-25: Add security policy
* 2026-04-24: imhttp: harden request parsing and cleanup (#6758)
* 2026-04-24: imdocker: stabilize image-name test
* 2026-04-23: omuxsock: fix message loss bug for connected Unix domain sockets (#6750)
* 2026-04-23: imfile: release deleted-file FDs after FILE_DELETE_DELAY in inotify mode
* 2026-04-23: .codex: restore wrapped git commit hook matching
* 2026-04-22: omusrmsg: guard empty systemd session lists
* 2026-04-22: omfwd: avoid recursive target teardown
* 2026-04-22: fmhash: fix build issue
* 2026-04-22: doc: update modules documentation (#6714)
* 2026-04-21: prepare for next scheduled stable release cycle
* 2026-04-20: style: format obj helper declaration
* 2026-04-20: style: drop redundant cstr null checks
* 2026-04-20: queue: harden corrupt disk queue recovery
* 2026-04-20: queue: delete orphaned disk queue write files
* 2026-04-20: prepare for 8.2604.0 release
* 2026-04-20: omfwd: flush pending data before zip teardown
* 2026-04-20: imptcp: harden stream compression handling
* 2026-04-20: doc: shrink ROSI architecture image in dist
* 2026-04-19: imfile: harden state file handling
* 2026-04-19: core: harden string allocation and copy handling
* 2026-04-18: omotel: ignore generated protobuf tree
* 2026-04-18: imkafka: harden worker startup and teardown
* 2026-04-18: imhiredis: place stream index helper before use
* 2026-04-18: imhiredis: harden stream index parsing and setup
* 2026-04-18: imdocker: harden setup and URL construction
* 2026-04-18: imdocker,imhiredis: fix curl teardown and style
* 2026-04-17: imudp,imdtls: harden listener setup paths
* 2026-04-17: imdtls: disable failed listeners cleanly
* 2026-04-17: gssapi: fix token timeout handling
* 2026-04-17: gssapi: fix interrupted token io loops
* 2026-04-17: doc: clarify severity-aware shared ratelimit use
* 2026-04-16: imjournal: harden state file handling
* 2026-04-16: im3195: harden RFC3195 callback handling
* 2026-04-16: gssapi: improve robustness and listener handling
* 2026-04-15: runtime: harden queue config and worker handling
* 2026-04-15: omfile: harden dynafile cache validation
* 2026-04-15: omfile: address review follow-up cleanups
* 2026-04-14: omrelp: use stable data in librelp callbacks
* 2026-04-14: omrelp: use generic code in onErr
* 2026-04-14: omfwd: support musl resolver APIs
* 2026-04-14: omelasticsearch: fix port detection for IPv6 server addresses
* 2026-04-14: imhttp: add route-scoped API key authentication
* 2026-04-14: configure: reduce resolver link probe
* 2026-04-14: configure: link resolver libs on solaris
* 2026-04-14: configure: gate omfwd resolver APIs
* 2026-04-13: runtime: add watched policy reload scheduling
* 2026-04-13: ratelimit: free dropped TCP messages on helper errors
* 2026-04-13: [Modernization] Replace Internal Backticks with Shell Expansion: Misc test files
* 2026-04-13: Add missing mmdb files to tests/Makefile.am
* 2026-04-12: runtime: cleanup zero-size alloc handling
* 2026-04-12: rsconf: clarify stale loadConf comments
* 2026-04-12: ratelimit: keep TCP batch processing on drops
* 2026-04-12: omhttp: harden payload length handling
* 2026-04-12: imuxsock: bound per-pid ratelimiter cache
* 2026-04-12: imtcp: harden limit validation and worker shutdown
* 2026-04-12: impstats: clean up minor report nits
* 2026-04-12: fix(imtcp): fix typos and remove duplicate assignments in imtcp.c
* 2026-04-12: Fix for Unused import
* 2026-04-12: Fix for File is not always closed
* 2026-04-11: add compression option with new test and changed request building
* 2026-04-09: runtime: harden stringbuf contains matching
* 2026-04-09: runtime: harden TCP framing size handling
* 2026-04-08: mmutf8fix: also fix invalid UTF-8 in RFC 5424 structured data
* 2026-04-07: ratelimit: watch YAML policy files with debounce
* 2026-04-06: [Modernization] Replace Internal Backticks with Shell Expansion
* 2026-04-06: Discard partial map/array objects on error
* 2026-04-04: doc: document omfwd connection statistics
* 2026-04-03: runtime: map common legacy selector actions to YAML
* 2026-04-03: runtime: harden YAML string-node OOM handling
* 2026-04-03: runtime: emit structured YAML for simple translations
* 2026-04-03: grammar: fix YAML script buffer filename leak
* 2026-04-02: runtime: add config translation mode
* 2026-03-31: omelasticsearch: suspend action on 5xx or 429 HTTP status codes
* 2026-03-31: omelasticsearch: check HTTP status code in checkConn health check
* 2026-03-31: [build]: require OpenSSL if imdtls or omdtls is used
* 2026-03-30: mmjsontransform: reload transformation mode from policy
* 2026-03-30: mmjsontransform: add YAML policy processing
* 2026-03-30: build: stop shipping .gitignore files
* 2026-03-30: [codex] doc: fix random sampling example (#6678)
* 2026-03-30: [General]: Install tzdata in default docker image
* 2026-03-30: Fix DoS in imjournal sd_journal_wait
* 2026-03-29: doc: remove stray merge marker in deployments index
* 2026-03-29: doc: clarify YAML positioning and workflow guidance
* 2026-03-28: yamlconf: warn on duplicate top-level keys, document as unsupported
* 2026-03-28: scripts: add doc-xref-sync linter check for broken :doc: references
* 2026-03-28: doc: register design_decisions.rst in EXTRA_DIST
* 2026-03-28: doc(yamlconf): fix EXTRA_DIST entry and cross-reference path
* 2026-03-28: doc(yamlconf): add architecture doc, expand RainerScript relation
* 2026-03-28: doc(yaml_config): add version requirement note (8.2604.0+)
* 2026-03-28: doc(conf_formats): use FmtYamlName macro, fix macro-in-bold issue
* 2026-03-28: doc(conf_formats): add YAML as fourth format option, cross-link pages
* 2026-03-27: test(yaml-unset): guard against false pass when verify file is absent
* 2026-03-27: refactor(yamlconf): extract nvlst helper, add Doxygen, fix test coverage
* 2026-03-27: feat: add YAML as an alternative configuration format
* 2026-03-27: docs(agents): add rsyslog_config skill and config parity guidance
* 2026-03-27: doc(yamlconf): improve completeness of YAML config reference
* 2026-03-27: doc(yamlconf): fix malformed RST grid table (Set row off by one space)
* 2026-03-27: devtools: add repo-local Codex commit hook
* 2026-03-26: feat: add YAML as an alternative configuration format
* 2026-03-26: feat(yamlconf): add filter/actions shortcut for rulesets
* 2026-03-25: omhttp: reuse curl handles and coordinate health checks
* 2026-03-25: omhttp: fix shared health state and gzip headers
* 2026-03-24: gtls: check CRL expiration, reject connections with expired CRL
* 2026-03-23: doc: imptcp: remove outdated 16-thread limit note
* 2026-03-21: doc/container: mark ETL image experimental
* 2026-03-20: update doc url in README.md
* 2026-03-20: doc: sync container docs with current images
* 2026-03-20: doc: fix ROSI link audience in overview pages
* 2026-03-19: doc: link ROSI references to overview page
* 2026-03-19: doc: improve ROSI navigation and scope notes
* 2026-03-19: doc: broaden ROSI framing beyond collector
* 2026-03-18: doc: document Windows clients in ROSI Collector
* 2026-03-18: doc: add ROSI stack deployment tutorial
* 2026-03-16: omfwd: add num.connects statistic for TCP connection tracking
* 2026-03-16: imfile: preserve symlink cleanup notifications with deferred destroy
* 2026-03-16: core: Fix typos in comments
* 2026-03-13: doc: Fix Mermaid diagrams and unify build output to build/
* 2026-03-11: tls: add native post-quantum guidance and tests
* 2026-03-11: packaging: add Ubuntu package build CI for focal, jammy, noble
* 2026-03-10: docs: clarify PrioritizeSAN fallback behavior and auth mode prerequisite
* 2026-03-10: Add azure Monitor API ingestion module
* 2026-03-04: Use suggested error handling when node becomes NULL mid-loop
* 2026-03-04: Remove "ifdef json_type_uint64"
* 2026-03-04: Discard partial map/array objects on error
* 2026-03-04: Add uint64 handling if it is supported
* 2026-03-03: rpm: packaging overhaul, CI job, and review fixes
* 2026-03-02: imjournal documentation: FileCreateMode was introduced in v8.2306.0
* 2026-03-02: docs: remove -c5 from troubleshooting example
* 2026-02-27: Revert "docs: Add ROSI Collector Hetzner Cloud tutorial"
* 2026-02-26: ratelimit: wire ratelimit.name into remaining modules
* 2026-02-26: omusrmsg: add ratelimit support
* 2026-02-26: omkafka: add poll thread; fix races and deprecated usleep
* 2026-02-26: imrelp: add ratelimit support (interval, burst, name)
* 2026-02-26: Stop all outer recursive loops in MAP case on corrupted data
* 2026-02-26: Skip truncated field
* 2026-02-26: Replace Variable-Length Array with fixed sized one
* 2026-02-26: Address style/formatting issues
* 2026-02-26: Add json NULL checks
* 2026-02-25: packaging: Update RHEL Docker Build Image
* 2026-02-25: omotel: add native protobuf encoding (http/protobuf)
* 2026-02-25: docs: Add ROSI Collector Hetzner Cloud tutorial
* 2026-02-25: doc: add deterministic HTML link validation in docs CI
* 2026-02-25: Update mmdblookup so it does not rely on JSON dump
* 2026-02-24: doc: fix stale relative links causing malformed paths
* 2026-02-24: doc: bump footer copyright year to 2026
* 2026-02-24: doc: add ROSI guides and beginner infographic
* 2026-02-24: Codex/process GitHub issue 4697 (#6582)
* 2026-02-23: runtime: close worker-start cancellation race
* 2026-02-22: doc: update canonical location for doc set
* 2026-02-18: tools: fix linking issue with libyaml
* 2026-02-18: runtime: refactor dynstats meta-counter name assembly
* 2026-02-18: prepare for next scheduled stable release cycle
* 2026-02-18: doc: fix release_string_detail NameError, narrow deploy to main only
* 2026-02-18: doc: add GitHub Actions workflow to deploy docs with GA to Pages
* 2026-02-18: doc: add GA support with input validation and fallback (#6561)
* 2026-02-18: core: expand checked literal copies across fixed buffers
* 2026-02-17: doc: add optional Google Analytics via sphinxcontrib-googleanalytics (#6559)
* 2026-02-17: ChangeLog: correct overhyped feature
* 2026-02-17: ChangeLog: add missing entry * 2026-06-23: bump version number for scheduled stable release
* 2026-02-16: configure: default-enable impstats push build support (#6542)
* 2026-02-16: better handle copy of constant string to ip address buffer (#6557)
* 2026-02-13: imjournal: fix stats counter type for uint64 fields
* 2026-02-13: doc: restructure impstats reference for clearer modes
* 2026-02-13: doc: expand impstats push docs and FAQ coverage
* 2026-02-13: doc: describe impstats push mode for VictoriaMetrics
* 2026-02-13: doc: add impstats VictoriaMetrics push tutorial
* 2026-02-11: runtime: iterate ptcp addresses and validate bind device
* 2026-02-11: feat(rosi-collector): impstats sidecar on server, Grafana rate limits, docs
* 2026-02-08: packaging/docker: trim ubuntu24 image build artifacts
* 2026-02-08: omhttp: add VictoriaLogs jsonline CI test
* 2026-02-08: curl modules: pass long literal to CURLOPT_POST
* 2026-02-06: omhttp: reuse reply buffer with cap and safer sizing
* 2026-02-06: github action security follow up (#6532)
* 2026-02-06: build: normalize object prototypes and remove decl noise
* 2026-02-04: 🛡️ Sentinel: Fix buffer overflow risk in datetime formatting
* 2026-02-04: doc: fix conflict markers in omhdfs-omhdfsport.rst
* 2026-02-04: Fix infinite loop in re_extract when regex matches empty string
* 2026-02-04: Codex/fix issue #6517 in rsyslog (#6520)
* 2026-02-03: runtime: lower internal message rate defaults
* 2026-02-03: rosi-collector: add Syslog Health (impstats) dashboard and client sidecar
* 2026-02-03: doc: improve sparseArray doc and suggest is_in_subnet
* 2026-02-03: doc/ommail: correct CRLF escaping; bind body template
* 2026-02-03: Fix lookup table reload race condition (Device or resource busy)
* 2026-02-03: Fix build failure with OpenSSL 3.4.3+ due to deprecated ENGINE API
* 2026-02-03: Codex/add documentation for pcre matching (#6509)
* 2026-02-02: runtime: include IPv6 scope id in DNS cache keys
* 2026-02-01: ossl: make OCSP requests non-blocking with caching
* 2026-01-31: runtime: fix srUtilItoA() data type inconsistencies
* 2026-01-31: impstats: add VictoriaMetrics push via Remote Write
* 2026-01-30: stream: lock open/init and defer error log
* 2026-01-30: runtime: call class exit on lib unload
* 2026-01-30: nsd_ossl: abort failed handshakes
* 2026-01-29: runtime: clarify atomic helper usage
* 2026-01-29: queue: fix slow drain of disk-assisted queues
* 2026-01-29: queue: fix DA worker infinite loop regression from commit 4748c5746
* 2026-01-29: imkafka: add JSON batch splitting for Azure Event Hub
* 2026-01-29: fix(obj): use best-effort atomics for ifIsLoaded to eliminate TSAN warnings
* 2026-01-28: omfile: pass size-limit file to rotate cmd
* 2026-01-28: configure: fix xxhash library check missing error action
* 2026-01-25: imtcp: add MultiLine and regex framing support
* 2026-01-25: SQUASH: some fixes
* 2026-01-24: template: add omitIfZero option to property()
* 2026-01-24: agent/skills: standardize test registration and mock check
* 2026-01-23: tools: honor main_queue name override
* 2026-01-23: skills: implement extended documentation distribution check
* 2026-01-23: fix(tools): graceful exit on recvfrom error in wait_timeout
* 2026-01-23: doc: refine memory auditor guidelines with CHKmalloc and NULL checks
* 2026-01-23: core: streamline agent instructions with modular skills
* 2026-01-23: action: add batchesprocessed pstats counter
* 2026-01-22: imfile: add inode generation check for file rotation detection
* 2026-01-21: sidecar: add rsyslog impstats exporter
* 2026-01-19: ossl: add OCSP certificate revocation checking support
* 2026-01-17: nitfix: add output files to .gitignore
* 2026-01-17: imfile: add inotify fallback rescans on watch limits
* 2026-01-17: doc: add imfile new parameter doc
* 2026-01-16: queue: harden disk recovery after invalid .qi
* 2026-01-16: core: fsync+atomic rename for pid file; abort on failure
* 2026-01-16: build: move doc EXTRA_DIST into doc/Makefile.am
* 2026-01-15: mmanon: add retry limit + fallback for unique randomization (#6444)
* 2026-01-14: Improve test infrastructure: fix core dump race condition
* 2026-01-13: fix pmlastmsg.c typo error
* 2026-01-13: docs: Add Core Philosophy page
* 2026-01-13: doc: deprecate omruleset; add call migration guide
* 2026-01-12: rainerscript: add is_in_subnet() built-in
* 2026-01-12: omhiredis: remove unneded param name from param table
* 2026-01-12: omfile: fix pszSizeLimitCmd leak; own copy from outchannel
* 2026-01-12: nitfix: code style
* 2026-01-12: imfile: guard statefile unlink and honor RMStateOnMove
* 2026-01-12: doc: imhttp: document ability to bind to specific IP addresses
* 2026-01-12: doc: add FAQ about blocking actions and queues
* 2026-01-12: core: make action state changes output better debug info
* 2026-01-09: action: guard worker instance check on non-atomic builds
* 2026-01-09: Fix: Use __has_include to check for rabbitmq-c headers
* 2026-01-09: Fix imjournal test race condition with parallel execution
* 2026-01-08: contrib/imczmq,omczmq: add CZMQ 4.2+ version guards
* 2026-01-07: runtime: fix race condition in worker thread cancellation
* 2026-01-07: runtime: fix inconsistent synchronization of iCurNumWrkThrd
* 2026-01-07: runtime: fix TOCTOU race in worker thread creation
* 2026-01-07: omsnmp: fix legacy config path and session strings
* 2026-01-06: runtime: fix race condition in worker thread startup
* 2026-01-06: runtime: fix critical data race in wtpSetState()
* 2026-01-06: lmsig_ksi: remove unused REPORT_PARAM_MISSING macro
* 2026-01-06: Fix mmsnareparse test data files missing in make dist
* 2026-01-05: tcpflood: nitfix w/ compiler warning when DTLS is not configured
* 2026-01-05: rainerscript: add split() function
* 2026-01-05: doc: optimize agent build instructions for efficiency
* 2026-01-05: doc: add sparseArray lookup IPv4 subnet matching example
* 2026-01-05: core/AIX: fix an hard exit() on certain failure at AIX
* 2026-01-05: Refactor duplicate string copy logic in msg.c
* 2026-01-05: Refactor Prometheus stats generation to a separate function
* 2026-01-04: queue: re-implement queue size warnings
* 2026-01-04: doc: imrelp: clarify missing MaxSessions and session stats (#6414)
* 2026-01-03: runtime/ratelimit: annotate ratelimit nonnull contracts
* 2026-01-02: tcpsrv: restore default stack size assignment
* 2026-01-02: runtime/nsd_ossl.c: fix authmode authorization bypass
* 2026-01-02: integer parsing more robust
* 2026-01-01: core, runtime, omfwd: plumb action name into modules and logs
* 2025-12-31: core: improve some important inline documentation
* 2025-12-30: omelasticsearch fix: potential NULL dereference
* 2025-12-30: msg, docs: document jsonMerge overwrite; drop TODO
* 2025-12-30: imjournal: make PRIORITY parsing robust and quiet
* 2025-12-29: ratelimit: add named policies; wire into imtcp/imptcp
* 2025-12-29: docs: add module template and tighten RST AI authoring rules
* 2025-12-29: build: add missing doc files to EXTRA_DIST
* 2025-12-28: ossl: fix ctx double-free and config string leaks
* 2025-12-28: omkafka fix: double-free of kafkaheader if used
* 2025-12-28: imjournal: remove unused ctrPollFailed
* 2025-12-27: Add rsyslog-doc AI assistant prompt and update meta-docs
* 2025-12-26: Update tests/omfwd_rebind_udp.sh
* 2025-12-25: runtime/rsksi: check KSI_DataHash_extract return values
* 2025-12-25: Architectural Analysis of Rsyslog Core (#6390)
* 2025-12-24: rainerscript: ensure parse_json consumes entire input string
* 2025-12-24: rainerscript: add split() function
* 2025-12-24: omfwd: fix RebindInterval suspension and improve UDP cleanup
* 2025-12-24: docs: refactor AGENTS.md for agent clarity, safety, and precision
* 2025-12-23: rainerscript: ensure parse_json consumes entire input string
* 2025-12-23: fix improper ":json:" use
* 2025-12-23: doc: fix version (accidentally not updated)
* 2025-12-23: Update doc/source/reference/parameters/omudpspoof-template.rst
* 2025-12-22: nitfix: code style violations
* 2025-12-22: netstream ossl driver: small fix in meta information
* 2025-12-22: doc: add RAG Knowledge Base extraction and build integration
* 2025-12-21: docs: formalize defensive coding and assertion patterns
* 2025-12-21: doc: modernize and expand queue concept documentation
* 2025-12-21: doc: fix missing EXTRA_DIST entry
* 2025-12-19: rsyslog-ossl: Prevent double close of socket fd
* 2025-12-19: impstats: add log.file.overwrite parameter for atomic overwrites
* 2025-12-19: doc: update agent guidelines to require documentation for new parameters
* 2025-12-17: omudpspoof: update RainerScript examples
* 2025-12-17: imjournal: fix potential segfault (SIGBUS)
* 2025-12-17: doc: fix RST syntax errors in parameter documentation
* 2025-12-17: Remove macos-13 from CI and weekly jobs
* 2025-12-17: Fix doc build CI security, spelling, and RST build errors
* 2025-12-16: omudpspoof: fix module template example
* 2025-12-16: Refactor: rename omotlp module to omotel
* 2025-12-15: doc: unify mmanon random-consistent-unique text
* 2025-12-15: Add support healthchecktimedelay into omhttp
* 2025-12-11: omudpspoof: split parameter docs into reference pages
* 2025-12-11: omudpspoof: correct parameter scopes in references
* 2025-12-11: omudpspoof: align parameter casing with camelCase guidance
* 2025-12-11: omsnmp: align parameter heading with module scope (#6354)
* 2025-12-11: Codex/refactor rsyslog parameter documentation n6uh16 (#6345)
* 2025-12-11: Codex/refactor module parameter documentation atexhg (#6355)
* 2025-12-11: Codex/refactor module parameter documentation (#6349)
* 2025-12-11: Codex/refactor module documentation into parameter files (#6348)
* 2025-12-05: prepare for next daily stable cycle
* 2025-12-05: omdtls: fix incorrect usage of gai_strerror
* 2025-12-05: mmjsontransform: fix compiler warning
* 2025-12-05: core: fix LogError(0, ...) anti-pattern and add guidelines
* 2025-12-05: build: fix missing test files in dist tarball
* 2025-12-04: omhiredis: Allow to define a name to instance and use it in logs
* 2025-12-04: doc: fix some small glitches
* 2025-12-03: packaging/docker: add TLS support to collector image
* 2025-12-03: mmanon: better document externalized function part
* 2025-12-03: docs: clarify coding practices path in prompts
* 2025-12-03: docs: add assert-plus-fallback helper guidance
* 2025-12-03: docker/collector: always load imtcp module
* 2025-12-03: doc: handle backslash continuations in rsyslog lexer
* 2025-12-03: doc: add contract pattern for externalized helpers
* 2025-12-02: mmanon: fix spacing for format
* 2025-12-02: doc: fix omlibdbi parameter examples
* 2025-12-02: New functionality for omuxsock (#5630)
* 2025-12-01: omuxsock documentation changes
* 2025-12-01: mmanon: tidy inline comments
* 2025-12-01: imtcp: add NetworkNamespace
* 2025-12-01: Codex/refactor rsyslog parameter documentation 8z2p3x (#6327)
* 2025-11-30: omfwd: add DNS SRV discovery (targetSrv)
* 2025-11-28: feat(deploy): add ROSI Collector centralized log collection stack
* 2025-11-28: Codex/refactor rsyslog parameter documentation (omjournal) (#6309)
* 2025-11-26: doc: add TLS example for omelasticsearch
* 2025-11-25: mmsnareparse: make regex trailing search limit configurable
* 2025-11-25: mmanon: fix races in IPv4 trie and IPv6 hash access (#6315)
* 2025-11-25: doc: add SETUP, BUILD, TEST agent task keywords
* 2025-11-25: Codex/refactor rsyslog module parameter documentation wnkysy (#6311)
* 2025-11-24: mmsnareparse: add parameter ignoreTrailingPattern.regex
* 2025-11-21: mmsnareparse: add ignoreTrailingPattern parameter
* 2025-11-21: build: Add code coverage targets
* 2025-11-18: doc: some nitfixes to historical doc
* 2025-11-18: doc: add conceptual model summaries
* 2025-11-18: Codex/refactor omdtls documentation for parameters (#6298)
* 2025-11-17: mmsnareparse: add Sysmon event support via JSON definition file
* 2025-11-17: doc: add json-ld (basic schema) (#6303)
* 2025-11-14: doc: restructure and modernize project history; add origins page and xrefs
* 2025-11-14: container: add libyaml to some dev containers
* 2025-11-14: Fix: Remove stray/unwanted 'rsyslog' subproject
* 2025-11-14: Codex/refactor rsyslog module documentation parameters (#6296)
* 2025-11-12: omhttp - Add two profile for Splunk HEC (#6150)
* 2025-11-12: fix codestyle issue (minor)
* 2025-11-12: Codex/refactor rsyslog parameter documentation fvn43p (#6290)
* 2025-11-12: Codex/refactor rsyslog module parameter documentation omgssapi (#6294)
* 2025-11-09: doc: add FAQ if rsyslog runs on windows
* 2025-11-07: Implement Kafka Metrics, new pstats format (#6154)
* 2025-11-06: fix typo in European mirror link (https vs. http)
* 2025-11-06: doc: clarify release channels in versioning guide (#6289)
* 2025-11-05: doc: add release version number semantic info (#6286)
* 2025-11-05: Codex/refactor rsyslog module parameter documentation s7jgy3 (#6277)
* 2025-11-05: Codex/refactor rsyslog module parameter documentation p47sz4 (#6285)
* 2025-11-05: Codex/refactor rsyslog module parameter documentation khpye2 (#6276)
* 2025-11-05: Codex/refactor rsyslog module parameter documentation bn356b (#6287)
* 2025-11-05: Codex/refactor rsyslog module documentation b6q3fv (#6281)
* 2025-11-04: feat(imhiredis): Add support for TLS in imhiredis (#21)
* 2025-11-03: nsd_gtls: fix repeated warnings on connection retry + test
* 2025-11-03: content_count_check: use optional file argument if provided
* 2025-11-03: README.md Updates for clarity and content (#6282)
* 2025-11-03: Enhance README with Table of Contents and new sections (#6283)
* 2025-10-31: tcpsrv: stop workers before destruction
* 2025-10-31: PoC: rsyslog ETL pipeline container for sending to vespa.ai
* 2025-10-30: omhttp - Stats by destination server (#6141)
* 2025-10-30: Fix typos: corrected 'intial' to 'initial' and 'intialize' to 'initialize'
* 2025-10-30: Codex/refactor rsyslog module parameter documentation rgp0jv (#6256)
* 2025-10-30: Codex/refactor module name parameters documentation (#6250)
* 2025-10-30: Add support for TLS in omhiredis (#17)
* 2025-10-29: omelasticsearch: add apikey authentication
* 2025-10-29: doc: fix trailing whitespace in man pages
* 2025-10-29: doc: add faq entry for rsyslog as etl tool (#6272)
* 2025-10-29: doc: add FAQ for sending data to vespa.ai
* 2025-10-24: doc/build: ship vendor/tools; make sitemap opt-in
* 2025-10-24: action.c: reordered actionDestruc
* 2025-10-23: doc: enable sphinx sitemap generation for html output
* 2025-10-22: doc: vendor mermaid assets and fix offline viewing
* 2025-10-22: doc: update SIGINT signal documentation in man page
* 2025-10-20: doc: make git optional for Sphinx builds (dist tarballs)
* 2025-10-20: doc: enable parallel Sphinx builds; silence edit_on_github
* 2025-10-17: Add doc for mbedtls driver
* 2025-10-15: bump version number for 8.2512 series
* 2025-10-15: Doc: Minor spelling and typing mistakes (#6242)
* 2025-10-15: Codex/refactor rsyslog imklog module parameter documentation (#6246)
* 2025-10-13: Codex/refactor parameter documentation for imkafka (#6243)
* 2025-10-11: core: stop busy-loop when action disables itself
* 2025-10-11: Add MbedTLS netstream driver.
* 2025-10-10: Codex/refactor rsyslog imgssapi module parameter documentation (#6239)
* 2025-10-10: Codex/refactor rsyslog imdiag module parameter documentation (#6235)
* 2025-10-09: prepare for 8.2510.0 scheduled stable release
* 2025-10-09: ossl bugfix: ensure peer cert is freed in osslChkPeerAuth
* 2025-10-09: omotlp: introduce OTLP/HTTP log exporter
* 2025-10-07: mysql: stabilize async ommysql workers via proper thread init
* 2025-10-07: imptcp: fix null pointer dereference in error logging
* 2025-10-07: docs: add Agent Chat Keywords to AGENTS.md
* 2025-10-06: feat: Trigger macOS workflow on relevant file changes
* 2025-10-06: doc: im prove log pipeline documentation
* 2025-10-06: doc: clarify reliable forwarding examples
* 2025-10-06: Fix: Make RSYSLOG_DYNNAME generation POSIX-compliant
* 2025-10-05: doc: refresh database and PRI tutorials
* 2025-10-05: doc: improve mmjsonparse documentation
* 2025-10-05: Codex/refactor rsyslog parameter documentation 68okf4 (#6219)
* 2025-10-04: mmjsonparse: add find-json mode for embedded JSON
* 2025-10-04: Codex/refactor rsyslog module documentation (#6215)
* 2025-10-04: CI,DIST: build docs from 'make dist' tarball
* 2025-10-02: test: Enable Valgrind for manytcp-too-few-tls-vg.sh
* 2025-10-02: Increase message loss tolerance in TargetFail test
* 2025-10-01: template: fix lenStr for subtree rendering
* 2025-10-01: mmjsontransform: add experimental JSON dotted-key (un)flatten
* 2025-09-29: omkafka: restore producev fallback for older librdkafka
* 2025-09-29: omelasticsearch: implement target platform check (#6197)
* 2025-09-29: mmexternal: split parameter in doc (#6193)
* 2025-09-29: imtcp: Improve peer logging to include source ports (#6198)
* 2025-09-29: CI containers: include mbedtls test environment
* 2025-09-28: imdiag/tests/docs: use RFC5737 test IP in samples
* 2025-09-28: Codex/refactor parameter documentation for mmjsonparse (#6189)
* 2025-09-27: doc: split property documentation into separate files
* 2025-09-26: docs: add agent guides and module metadata scaffolding
* 2025-09-26: mmanon: split parameter docs into reference
* 2025-09-25: omelasticsearch: omit _type by default; use typeless endpoint
* 2025-09-25: doc: update imjournal journald warning
* 2025-09-24: template: add jsonftree option for nested jsonf output
* 2025-09-24: mmfields: split parameter docs into reference pages
* 2025-09-23: omusrmsg bugfix: potential null pointer dereference causes segfault
* 2025-09-23: omfile: enable addLF by default
* 2025-09-23: mmsnarewinsec: comprehensive Windows Security Event Log parser
* 2025-09-23: doc: improve subtree, list template documentation
* 2025-09-23: doc: further improve template doc
* 2025-09-23: Update doc/source/reference/templates/templates-type-list.rst
* 2025-09-23: Codex/refactor module documentation for mmdblookup
* 2025-09-22: omfile: add addLF option to append newline (#6165)
* 2025-09-22: Codex/refactor rsyslog parameter documentation inmmexternal
* 2025-09-22: Codex/document mmaudit plugin with sphinx (#6167)
* 2025-09-20: tests/omelasticsearch: align suite with ES 7.14, reduce flakiness
* 2025-09-19: refactor rsyslog parameter documentation mmdarwin
* 2025-09-19: refactor rsyslog parameter documentation mmcount
* 2025-09-19: refactor rsyslog module parameter documentation mmaitag
* 2025-09-18: omazureeventhubs: fix data races and suppressions
* 2025-09-18: mmleefparse: new message modification module for LEEF format
* 2025-09-17: doc: Add helper scripts to build documentation
* 2025-09-17: * imtcp: warn on TLS handshakes received on plain listeners
* 2025-09-16: refactor rsyslog parameter documentation mmutf8fix
* 2025-09-15: fix config error on systems with pkg-config but not libgcrypt-config
* 2025-09-15: docs/getting_started: add AI assistants page
* 2025-09-15: doc: new beginner tutorials
* 2025-09-15: dev container: do not work-around libgcrypt dev interface change
* 2025-09-13: doc: describe regex lookup table type
* 2025-09-13: Codex/refactor rsyslog parameter documentation for mmtaghostname
* 2025-09-12: logctl tool: fix mongoc.h include location
* 2025-09-12: docs: fix doc build instructions (Sphinx 4.5+, main, monorepo) (#6114)
* 2025-09-12: docker: fix collector, udp and tcp could not be enabled individually
* 2025-09-12: docker: enhancements to debian sid and ubuntu 24.04 dev container
* 2025-09-12: docker: add relp listener to rsyslog "collector"
* 2025-09-12: doc: document compactjsonstring global option (#6127)
* 2025-09-12: doc: better doc for rsyslog collector container
* 2025-09-12: core: add doxygen comments to errmsg object
* 2025-09-11: refactor rsyslog module parameter documentation for mmsnmptrapd
* 2025-09-11: net: Add NetworkNamespace APIs
* 2025-09-11: imtcp support for NetworkNamespace * 2026-02-16: prepare for 8.2602.0 scheduled stable release
* 2025-09-10: tls: process TLS 1.3 KeyUpdate during send (ossl/gtls)
* 2025-09-10: improve original patch
* 2025-09-10: docker: update Debian 13 build to inlcude more modules
* 2025-09-10: doc: improg had a strangely worded limitation listed - corrected (#6115)
* 2025-09-10: Update doc/README.md
* 2025-09-09: doc: update reference section on doc structure
* 2025-09-09: core: add setting to permit compact json format
* 2025-09-09: Codex/refactor rsyslog module parameter documentation mmrfc5424addhmac
* 2025-09-09: CI remove old kafka codecov builder now the new one is present
* 2025-09-06: doc: document git path resolution
* 2025-09-06: devtools: Specify usage of clang-format-18 to pin v18
* 2025-09-05: rainerscript: add toupper() function
* 2025-09-05: misc: add void parameter lists
* 2025-09-05: doc: restore missing doc files in configure.ac
* 2025-09-04: imhttp: guard handler registration
* 2025-09-04: devtools: use codecov uploader in CI script
* 2025-09-04: config script: add b64_decode function
* 2025-09-04: Update devtools/run-ci.sh
* 2025-09-04: Codex/refactor rsyslog parameter documentation ejsnoq (#6085)
* 2025-09-03: runtime: fix Darwin build regressions and improve BSD portability
* 2025-09-03: omkafka: allow sending static headers
* 2025-09-03: mmpstrucdata: split parameter docs into reference pages
* 2025-09-03: mmpstrucdata: fix action parameter anchors and casing
* 2025-09-03: imdocker: Add image name to metadata fields
* 2025-09-03: code style: fix macro formatting
* 2025-09-03: ci(docs): add PR preview workflow via Actions Pages
* 2025-09-03: Implement omhttp batching and performance improvements
* 2025-09-03: Codex/refactor rsyslog parameter documentation (#6074)
* 2025-09-02: omsnmp: restructure (#6063)
* 2025-09-02: imrelp: fix potential segfault on termination (#5600)
* 2025-09-02: core: add fromhost-port message property
* 2025-08-28: tools/rsyslog.conf.5: fix example Port= value
* 2025-08-28: rainerscript: warn on excessive random range
* 2025-08-28: queue: refactor batch deletion with explicit phases (#6013)
* 2025-08-28: omsendertrack: "fix" static analyzer reported issue
* 2025-08-28: doc: work around a spellcheck restriction
* 2025-08-28: doc: note AI authorship\n\nAI-Agent: ChatGPT
* 2025-08-28: core: some code cleanup
* 2025-08-28: community: disable automatic welcome action
* 2025-08-28: code cleanup (rephrasing false postive commented out code)
* 2025-08-27: improve PR welcome message handling
* 2025-08-27: docs: fix typo ('begin' -> 'beginning') in developer documentation (#6029)
* 2025-08-27: docs: fix minor typos in docs/source (#6028)
* 2025-08-27: doc: fix assorted typos across documentation
* 2025-08-27: debug version of welcome script
* 2025-08-27: community: some fixes to "welcome" helper action
* 2025-08-27: community: add welcome message to first few commits (#6032)
* 2025-08-27: codeql: fix "master" branch reference
* 2025-08-27: Potential fix for code scanning alert no. 44: Commented-out code
* 2025-08-27: Add actions analysis
* 2025-08-26: prepare for next scheduled stable release cycle
* 2025-08-26: docs: add rsyslog issue assistant build files (#6026)
* 2025-08-26: dev doc: mention "good first issue" dashboard
* 2025-08-26: Update README.md
* 2025-08-25: prepare for daily stable 8.2508.0 release
* 2025-08-25: fix: doc/ not in tarball (in progress)
* 2025-08-25: doc: add code of conduct
* 2025-08-24: omrelp: add TCP keepalive configuration
* 2025-08-23: immark: document config cleanup
* 2025-08-23: imdocker: free temp buffer after log option parse
* 2025-08-22: tcpsrv: revert PR 5806 because it was ineffective
* 2025-08-22: tcpsrv: refactor IO loop; rearm-before-unlock; poll path
* 2025-08-22: imjournal: initialize instance fields to avoid invalid free
* 2025-08-22: imdocker: fix cosmetic memory leak
* 2025-08-21: runtime/tcpsrv: drop obsolete inQueue handling
* 2025-08-21: omhttp: guard rest path template access
* 2025-08-21: mmaitag: fix potential memory leak
* 2025-08-21: doc: restructure templates docs into hub and refs
* 2025-08-21: doc: restore property statement context
* 2025-08-21: core: code cleanup, avoid dead assignment
* 2025-08-21: core/nsd_ptcp: zero addr before getpeername()
* 2025-08-20: tcpsrv: stop loop after closeSess to avoid use-after-free
* 2025-08-20: omprog: split parameter docs into reference pages
* 2025-08-20: omfwd: document and enforce pool-level suspend semantics
* 2025-08-20: Update README.md - notification channels
* 2025-08-20: Update .github/instructions/modules.plugins.instructions.md
* 2025-08-19: imhttp: optional auth + Content-Length for metrics/health
* 2025-08-19: doc: make AI-First concrete; add guardrails and CI proof
* 2025-08-19: atomic: remove trailing semicolons from helper macros
* 2025-08-18: template: fix missing lenStr in subtree templates
* 2025-08-18: tcpflood: omit delimiter for octet frames
* 2025-08-18: serialize TLS session setup to avoid data race
* 2025-08-18: runtime: fix NetstreamDriverCAExtraFiles parsing
* 2025-08-18: omsendertrack: stop towards full completion of module.
* 2025-08-18: omhttp: add profile support and revise HTTP retry semantics
* 2025-08-18: imuxsock: tidy parameter docs and links
* 2025-08-18: imuxsock: split input parameter docs into reference pages
* 2025-08-18: imptcp: split parameter docs into reference pages
* 2025-08-18: docs: streamline contrib templates and commit guidance
* 2025-08-18: docs: split imfile module parameters (#5941)
* 2025-08-18: doc/imfile: add File and Tag to parameter samples
* 2025-08-18: OMHIREDIS: supported UDS redis server address
* 2025-08-17: ommongodb: fix compilation of SSL/TLS support
* 2025-08-17: ommongodb: add support for mongo-c-driver v2
* 2025-08-17: docs: rewrite container section with current images
* 2025-08-17: doc: add per-container docker pages with env defaults (#5960)
* 2025-08-16: imjournal: fix double sd_journal_close() during thread cancellation
* 2025-08-16: doc: warn against unofficial and outdated doc clones
* 2025-08-16: doc: set html_baseurl to emit canonical tags
* 2025-08-16: Update doc/source/conf.py
* 2025-08-15: omhttp: migrate to OMODTX; prep for project-supported status
* 2025-08-15: imtcp: split input parameter docs into reference pages
* 2025-08-15: imtcp: fix parameter scopes and add input examples
* 2025-08-15: doc: omkafka SASL-from-env example + backticks doc overhaul
* 2025-08-15: Update tests/omprog-feedback.sh
* 2025-08-15: Fix transaction suspension handling for issue #2420
* 2025-08-14: ommysql: remove long-standing non-needed TODO item
* 2025-08-14: imfile: add per-file impstats counters and tests
* 2025-08-14: doc: split imudp parameter docs
* 2025-08-13: ommysql: drop global rwlock_hmysql, revert a3b2983
* 2025-08-13: docs: split pmrfc3164 parameters into structured reference pages
* 2025-08-13: docs: split omelasticsearch parameters into dedicated reference pages
* 2025-08-13: docs: split imjournal parameter docs into dedicated reference pages
* 2025-08-13: doc: increase visibility of reverse DNS cache controls
* 2025-08-13: doc: clarify reverse DNS cache scope
* 2025-08-13: doc: add v8 locking note
* 2025-08-13: chore: document AI-generated changes
* 2025-08-12: doc: update to doc (improvement) strategy
* 2025-08-12: doc: reference AI module map in AGENTS.md and DEVELOPING.md
* 2025-08-12: doc: refactor imdocker module param docs into structured ref pages
* 2025-08-12: doc: imdocker had invalid legacy config stmt info - removed
* 2025-08-11: omazureeventhubs: add Doxygen docs for proton thread and flow (NFC)
* 2025-08-11: omamqp1: resize buffer via realloc with error handling
* 2025-08-11: docs: add developer page "Action Threads and Queue Engine"
* 2025-08-04: omazurevenethubs: fix compiler warning
* 2025-08-01: omysql: better doc to clarify mutex use
* 2025-08-01: core: migrate callback invocations to type-safe signatures
* 2025-08-01: Fix: Remove unsafe function pointer casting in cfsysline.c
* 2025-07-31: doc fix: remove doc for debug options that no longer exits
* 2025-07-31: core: improve inline code doc for action.[ch]
* 2025-07-30: parser: add checkParserInst hook for pre-registration validation
* 2025-07-30: doc: improve "AI First" coverage in about section
* 2025-07-28: ossl: Add PrioritizeSAN option to OpenSSL network stream driver
* 2025-07-28: imjournal: fix vulnerability in state file creation
* 2025-07-28: gtls: log missing certificate/key only once
* 2025-07-27: doc: Improve omfwd module documentation
* 2025-07-27: doc(omfwd): split and restructure omfwd documentation
* 2025-07-25: document [io]mczmq modules
* 2025-07-25: doc: add an initial "about" section
* 2025-07-25: Add Doxygen comments for czmq modules (#5865)
* 2025-07-24: Add sphinxcontrib-mermaid to documentation Docker image
* 2025-07-22: docs: add structured beginner guide under getting_started/
* 2025-07-22: doc: introduce mermaid diagrams and modernized configuration docs
* 2025-07-21: doc: major restructure and content improvements
* 2025-07-21: doc: fix legacy conf where modern should be
* 2025-07-21: Add furo theme for sphinx
* 2025-07-20: doc: add json targets
* 2025-07-20: doc: Modernize documentation and tooling
* 2025-07-20: Add documentation build workflow
* 2025-07-20: Add doc build workflow for PRs
* 2025-07-20: Add Apache License to documentation
* 2025-07-19: doc: some cleanup and naming changes
* 2025-07-19: doc: omit footer in singlehtml builds by default
* 2025-07-18: rainerscript: backticks support ${VAR} and adjacent text
* 2025-07-18: pmrfc3164: add headerless message detection and handling
* 2025-07-18: doc: restore control flow notes
* 2025-07-18: doc: clarify action flow and add test requirement
* 2025-07-18: Correct connection timing computation
* 2025-07-17: fix: readthedocs definitions
* 2025-07-17: doc: provide strategy and implementation document
* 2025-07-17: doc: fix "edit on github" repo link
* 2025-07-17: doc: enable readthedocs.io support
* 2025-07-16: style: reformat Config Settings block with Doxygen comments
* 2025-07-16: style: normalize C source formatting via clang-format (PoC)
* 2025-07-16: omelasticsearch fix: Handle HTTP 401/403 auth errors
* 2025-07-16: fix mmaitag provider handling and memory safety
* 2025-07-16: cleanup: remove code-style tools that are no longer neeed
* 2025-07-16: cleanup: fix reference to "master" branch -> now "main"
* 2025-07-16: chore: add project-wide formatting and editor configs
* 2025-07-16: Fix race condition in imtcp when closing sessions
* 2025-07-16: Add IP address SAN support
* 2025-07-15: fix: Prevent redefinition warnings for syslog macros
* 2025-07-15: feat: introduce mmaitag PoC with Gemini AI provider (#5754)
* 2025-07-15: doc: add FAQ with commonly misunderstood config sequences
* 2025-07-15: build: mmaitag in configure disabled by default (#5797)
* 2025-07-15: build: adjust version tag used for daily stable build process
* 2025-07-15: Investigate and resolve rsyslog issue 2693 (#5793)
* 2025-07-14: refactor: modernize macro definitions to support formatting and clarity
* 2025-07-14: docs: Fix minor typos
* 2025-07-13: impstats: add support for Prometheus metrics output format
* 2025-07-12: docker: reflect new state of repo
* 2025-07-12: doc: document gtls intermediate cert chain
* 2025-07-12: doc: clarify purpose of MsgSetRawMsg side effects
* 2025-07-12: dev doc: add design notes to queue subsystem files
* 2025-07-12: Improve TLS handshake error logging (#5762)
* 2025-07-12: Document statsobj architecture and formats
* 2025-07-11: tooling: new developer tool to fix trailing spaces
* 2025-07-11: Fix unsafe sprintf use in Azure event hubs module (#5687)
* 2025-07-10: update README.md - add new AI "rsyslog Assistant" link
* 2025-07-08: Document native message modification plugin interface (#5757)
* 2025-07-08: AI tools: Add directory for future AI/ML tooling (#5758)
* 2025-07-06: scripting: add endswith operator to property filters and RainerScript
* 2025-07-06: nsd_ptcp fix: misleading error messages (regression from ad1fd21)
* 2025-07-06: imtcp: prevent double-enqueue of descriptors via inQueue flag
* 2025-07-06: imkmsg fix: Handle EAGAIN/EWOULDBLOCK check portably
* 2025-07-05: helper utils: clean up python indentation
* 2025-07-04: imfile: add new module/input parameter deleteStateOnFileMove
* 2025-06-20: imfile: some cleanup, no functional changes
* 2025-06-20: fix off-by-one buffer overflow
* 2025-06-19: tcpsrv cleanup: remove TODO line that was scheduled to be removed
* 2025-06-18: tcpsrv: fail to remove already-removed epoll fd is no error
* 2025-06-18: official containers: bump rsyslog release nbr for next cycle
* 2025-06-17: omsendertrack fix: memory leak in initHashTable
* 2025-06-17: net_ossl: Fix memleak in net_ossl_peerfingerprint
* 2025-06-17: doc: first omsendertrack reference manual entry
* 2025-06-17: Bump tj-actions/changed-files from 4 to 46 in /.github/workflows
* 2025-06-17: Add omsendertrack statefile tests (#5716)
* 2025-06-15: update developer doc to point to new rsyslog-doc location
* 2025-06-15: docs: document proof-of-concept status
* 2025-06-15: doc: fix some nits, especially in the faq section
* 2025-06-15: doc: add lexer for rsyslog config language
* 2025-06-15: cleanup: fix some TODOs and remove outdated ones
* 2025-06-15: Fix: Correct documentation location and update build guidance
* 2025-06-14: doc: improve description of config parameter block handling
* 2025-06-14: doc: add doxygen comments to runtime header
* 2025-06-13: omfile: update internal doc to doxyfile format and improve it
* 2025-06-13: docs: add commenting style guide and reference
* 2025-06-13: add new FAQ on udp reception troubleshooting
* 2025-06-13: Use RGerhards name in omusrmsg header
* 2025-06-12: ossl netstream driver: do not import engines if not available (#5685)
* 2025-06-12: Removed the redundant *_la_LDFLAGS
* 2025-06-11: Add Makefile for Sphinx documentation
* 2025-06-10: prepare scheduled stable version 8.2506.0
* 2025-06-10: omusrmsg: use utmpx on systems where available
* 2025-06-10: imtcp: avoid data race in notifyReArm
* 2025-06-10: fix hashtable realloc memset range
* 2025-06-09: Revert "queue: emit better warning messages on queue param mismatch"
* 2025-06-08: omfwd regression fix: avoid false active target change log message
* 2025-06-08: lookup: add new table type for regex-matches
* 2025-06-08: imdocker: harden module buffer management
* 2025-06-08: clarify pselect suppression
* 2025-06-07: doc: document optional module dependencies
* 2025-06-07: Add optional PCRE match module
* 2025-06-06: fix stringop-overread warning in omusrmsg
* 2025-06-06: fix im3195 doc
* 2025-06-06: docs: unify AI commit instructions and improve setup notes
* 2025-06-06: docs: restructure contributor docs for clarity and AI agent readiness
* 2025-06-05: update README to convey new developments in this project
* 2025-06-05: fix mime type typo
* 2025-06-05: docs: clarify CI image size
* 2025-06-05: Update README to mirror new project organization
* 2025-06-05: STEP: interim new "production" docker container set
* 2025-06-05: Add README files for standard, dockerlogs, and host
* 2025-06-04: stats: add prometheus format to set of supported output formats
* 2025-06-04: imhttp: add simple http health check functionality
* 2025-06-04: hostname setting works
* 2025-06-04: Fix comment for parsSkipWhitespace
* 2025-05-23: imudp: Output errno after recvmmsg call
* 2025-05-15: imjournal: delete redundant lines in imklog.c
* 2025-05-12: netstrm: optimized interface for passing connection err info
* 2025-05-08: tls subsystem: generate better error message on accept failure
* 2025-04-24: tcpsrv: ensure thread name set via pthread is max 15 char
* 2025-04-24: ossl tls driver: better error reporting
* 2025-04-18: gnutls netstrm drvr fix: handle write retry correctly in recv call
* 2025-04-17: tcpsrv bugfix: do not busy wait on io events
* 2025-04-16: tcpsrv bugfix: input name was not properly propagated
* 2025-04-16: add experimental stats for worker awaking via event notification
* 2025-04-15: tcpsrv: fix non-maintained stats counter "run"
* 2025-03-25: Feature: #define macro creation for journald namespace function.
* 2025-03-22: omjournal: Fix priority value.
* 2025-03-22: Feature: Add journald namespace feature to omjournal.
* 2025-03-17: imuxsock: Add statistics counter for discarded messages
* 2025-03-14: cosmetic: remove clang static analyzer false positive
* 2025-03-06: omsendertrack: new module
* 2025-03-06: Fix a buffer overflow when the argument to replace is empty
* 2025-03-05: rsyslog startup bugfix: cosmetic memory leak
* 2025-03-05: gnutls TLS driver: fix small memory leak
* 2025-03-05: core: fix potential misadressing in sigmask
* 2025-03-03: Update man page dates
* 2025-03-01: omhttp: fix handling of httpProxy variable
* 2025-02-28: "fix" clang 18 static analyzer false positives
* 2025-02-27: queue: emit better warning messages on queue param mismatch
* 2025-02-26: core: fix potential NULL ptr access on HUP in very early startup phase
* 2025-02-21: bump version number for next scheduled stable cycle
* 2025-02-20: Fix typo in debug printf of ommysql
* Wed Sep 23 2026 thomas.blume@suse.com
- fix VUL-0: imdtls permitted-peer authorization bypass (bsc#1281628)
* add 0001-imdtls-fix-permitted-peer-authorization-bypass.patch
* Thu Sep 03 2026 thomas.blume@suse.com
- gtls: guard early debug-level lookup (bsc#1274610)
* add 0001-gtls-guard-early-debug-level-lookup.patch
* Mon Aug 24 2026 thomas.blume@suse.com
- fix RainerScript replace() heap buffer overflow (bsc#1275926)
* add 0001-fix-RainerScript-replace-heap-buffer-overflow.patch
* Fri Jul 31 2026 thomas.blume@suse.com
- added a devel subpackage, with requires (bsc#1264721)
* Mon Jul 27 2026 thomas.blume@suse.com
- fix rsyslog mmpstrucdata stack overflow (bsc#1272414)
(CVE-2026-61548)
* add 0001-rsyslogd-fix-rsyslog-mmpstrucdata-stack-overflow.patch
* Fri Jul 24 2026 thomas.blume@suse.com
- fix imptcp regex-framing remote denial of service (bsc#1271910)
* add 0001-imptcp-guard-regex-framing-match-at-line-start.patch
* Tue Nov 25 2025 thomas.blume@suse.com
- Fix SELinux context of rsyslog run directory (bsc#1253261)
* Wed May 14 2025 Thomas.Blume@suse.com
- select modules for SLFO (jsc#PED-12783)
* Wed May 07 2025 Thomas.Blume@suse.com
- rely on systemd file-triggers for reloading the daemon after
rsyslog modules update (bsc#1237462)
* Tue Apr 01 2025 hsk17@mail.de
- Upgrade to rsyslog 8.2502
* 2025-02-16: prepare for scheduled stable 8.2502.0 release
* 2025-02-13: openssl: check for ENGINE support in library
* 2025-02-13: CI: add compile check with atomic operations disabled
* 2025-02-12: omfwd bugfix: variable was not properly synced across threads
* 2025-02-12: omamqp1: Fixed build on Ubuntu 24
* 2025-02-12: testbench: Write started dummy file in python snmpreceiver script
* 2025-01-29: CI: add Testruns under Ubuntu 24.04
* 2025-02-07: testbench: Added new version of snmptrapreceiver.py for python 3.11+
* 2025-01-27: testbench: reduce flakiness for omhttp-batch-retry-metadata.sh test
* 2025-01-27: testbench: Fix OpenSSL 3.x depreceated warnings in tcpflood
* 2025-01-27: testbench: remove es 6.0 based tests
* 2025-01-27: omfwd: align some parameters with imtcp names
* 2025-01-22: tcpflood test tool: enable multi threaded connection open
* 2025-01-23: testbench: add new and adapt imtcp tests for large connection counts
* 2025-01-23: imtcp: add "socketBacklog" parameter to configure TCP backlog size
* 2025-01-23: testbench: adapt imptcp tests for large connection counts
* 2025-01-23: imptcp: Increase default SYN backlog for imptcp server to 64
* 2025-01-14: netstrm TLS driver: move TLS retry handling to main driver
* 2025-01-07: testbench flake fix: prevent "bad" timing to cause flakes
* 2025-01-03: Replaced inet_aton with inet_pton for IPv4 address conversion.
* 2024-11-28: CI: add check for compile with -std=gnu23 gcc option
* 2024-12-31: CI: remove libgrok-related codeql checks
* 2024-12-05: mmkubernetes: nitfix
* 2024-12-04: bump version number for next scheduled stable release
* 2024-11-28: omazureeventhubs: Handle invalid URL characters in config parameters
* 2024-12-02: prepare for schedule stable 8.2412.0 release
* 2024-11-26: Fix legacy $ActionQueueDiscardMark parameter
* 2024-11-26: imdiag bugfix: racy network driver selection
* 2024-11-15: CI: user newer OS versions in CI workflow
* 2024-11-18: gnutls bugfix: Add timeout to GnuTLS handshake
* 2024-11-18: gnutls bugfix: Avoid blocking sockets during TLS handshake
* 2024-11-15: cleanup: remove unused variable
* 2024-11-15: libksi: make build under C11 C standard
* 2024-11-15: cleanup: remove variables that are no longer used
* 2024-11-13: testbench bugfix: typo caused invalid test file to be used
* 2024-11-12: nsd_ptcp regression fix: remove debugging messages emited to stderr
* 2024-03-25: ossl netstream driver: allow ephemeral Diffie-Hellman key exchange
* 2024-11-07: Fix build on musl
* 2024-10-29: test bench fix: bump zookeper NVR
* 2024-10-25: imjournal: Fix first message loss after journal rotation
* 2024-10-20: bump version number for next scheduled stable release cycle
* 2024-10-20: prepare for 8.2410.0 scheduled stable release
* 2024-10-14: regression fix: build issue on Solaris 10
* 2024-09-23: testbench: correctly apply socket options in minitcpsrvr
* 2024-10-07: clean(imhiredis): Minor code fixes
* 2024-09-25: rainerscript: do not try to call a function if it does not exist
* 2024-09-20: Fix runConf NULL pointer refence
* 2024-09-15: network subsystem: improve connection failure error message
* 2024-08-22: add missing ChangeLog entry
* 2024-08-20: prepare for next scheduled release cycle
* 2024-08-19: build: make new openssl crypto provider individually selectable
* 2024-08-19: prepare for v8.2408.0 scheduled stable release
* 2024-08-19: build system: correct invalid file name
* 2024-04-12: omfwd: implement native load balancing - phase 1
* 2024-08-13: Adjust documentation regarding rscryutil
* 2024-08-14: Replace deprecated json_object_object_get
* 2024-08-15: minor: flag function as OK for undefined behaviour
* 2024-08-14: build fix: regression from recently merged 615cde156c14
* 2024-08-13: Refactor ossl crypto provider
* 2024-08-12: omkafka: write Kafka log with level ERROR or higher into errorfile
* 2024-08-02: openssl: Add remoteclient to LogMsg where possible
* 2024-07-31: imtcp: add streamdriver.crlfile module parameter
* 2024-05-10: Refactor the rscryutil tool
* 2024-07-23: imptcp: improve error messages
* 2024-07-18: omazureeventhubs: Fix implementation of amqp_address parameter
* 2024-07-18: ossl: Fix #pragma GCC diagnostic not allowed inside functions
* 2024-06-14: Fix memory leak in omazureeventhubs on accepted PN_DELIVERY event
* 2024-05-01: Keep original free pattern.
* 2024-04-19: Do not free the uninitialized cstring.
* 2024-05-08: Fix passing the value to EscapeChar.
* 2024-07-01: prepare for next scheduled stable release cycle
* 2024-06-21: tls bugfix: parameter 'StreamDriver.CRLFile' not known
* 2024-04-09: fix(lexer): typo and missing space when file can't be accessed
- source code now supports c23 standard
* Wed Mar 26 2025 andreas.stieger@gmx.de
- remove unused pcre build dependency
* Wed Jul 24 2024 Thomas.Blume@suse.com
- Upgrade to rsyslog 8.2406.0
-patches replaced by upgrade (see details in upgrade logs below)
0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* 2023-11-29: Revert "Update omlibdbi.c"
* 2023-11-21: imkmsg: add params "readMode" and "expectedBootCompleteSeconds"
* 2023-11-10: testbench: fix "typo" in test case
* 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures
* 2023-10-31: imkmsg: add module param parseKernelTimestamp
* 2023-11-03: imfile: remove state file on file delete fix
* 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work
* 2023-10-30: Netstreamdriver: deallocate certificate related resources
* 2023-10-20: TLS subsystem: add remote hostname to error reporting
* 2023-10-21: Fix forking issue do to close_range call
* 2023-10-23: replace debian sample systemd service file by readme
* 2023-10-20: testbench: bump zookeeper version to match current offering
* 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie
* 2023-10-20: Only keep a single rsyslog.service for Debian
* 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch
* 2023-10-18: use logind instead of utmp for wall messages with systemd
- replaces 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* 2023-10-11: Typo fixes
* 2023-10-11: Drop CAP_IPC_LOCK capability
* 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module
* 2023-10-03: Add new global config option "libcapng.enable"
* 2023-10-02: tcp net subsystem: handle data race gracefully
* 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler
* 2023-09-26: fix startup issue on modern systemd systems
* 2023-09-14: Fix misspeling in message.
* 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported
* 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set
* 2023-08-02: testbench: cleanup and improve some more imfile tests
* 2023-08-02: lookup tables: fix static analyzer issue
* 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded
* 2023-07-28: CI: fix and cleaup github workflow
* 2023-03-07: imjournal: Support input module
* 2023-07-28: testbench: make test more reliable
* 2023-07-28: tcpflood: add -A option to NOT abort when sending fails
* 2023-07-28: tcpflood: fix today's programming error
* 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method
* 2023-07-27: testbench improvement: define state file directories for imfile tests
* 2023-07-28: testbench: cleanup a test and some nitfixes to it
* 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly
* 2023-07-26: testbench: make waiting for HUP processing more reliable
* 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured
* 2023-07-25: CI: update zookeper download to newer version
* 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions
* 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years.
* 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+
* 2022-05-13: omazureeventhubs: Initial implementation of new output module
* 2023-07-03: TLS CRL Support Issue 5081
* 2023-06-29: action.resumeintervalmax: the parameter was not respected
* 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0
* 2023-05-15: Add the 'batchsize' parameter to imhiredis
* 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167)
* 2023-06-22: Do not try to drop capabilities when we don't have any
* 2023-06-22: testbench: use newer zookeeper version in tests
* 2023-06-22: build system: more precise error message on too-old lib
* 2023-05-17: Fix quoting for omprog, improg, mmexternal
* Thu Mar 14 2024 dimstar@opensuse.org
- Fix rpmlint warnings and errors:
+ rsyslog.spec:590: W: %autopatch-not-in-prep:
- applying patches should be done in prep section and in this
case, there is no reason not to do it. Use the opportunity to
switch to %autosetup.
- Do not BuildRequire libtool, autoconf, automake and don't run
autoreconf: the comment indicates this would be needed for
patch1, but likely for an 'older patch1': what we have now
does not touch the build system.
+ E: superfluous-%clean-section: Drop long deprecated %clean
section.
+ E: suse-zypp-otherproviders otherproviders(syslog): simply
provide syslog.
+ W: non-etc-or-var-file-marked-as-conffile: do not mark files in
/usr/share as config; admins are not supposed to change them.
+ rsyslog-doc.x86_64: E: no-binary: build rsyslog-doc as noarch.
+ E: explicit-lib-dependency librdkafka1: the dependency for one
should be in module-kafka, but then is also auto-detected by
RPM.
* Thu Jan 18 2024 thomas.blume@suse.com
- suppress installation errors when systemd is not running
(bsc#1218799)
* Wed Oct 25 2023 thomas.blume@suse.com
- use logind instead of utmp for wall messages with systemd
Future SUSE versions will get rid of utmp due to a 32bit time_t counter
overflow in 2038.
See details at:
https://github.com/thkukuk/utmpx/blob/main/Y2038.md
On systemd based systems logind is an alternative to utmp.
* add: 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* Tue Sep 05 2023 thomas.blume@suse.com
- trigger daemon restart after modules packages have been updated
(bsc#1214996)
* Tue Jul 04 2023 thomas.blume@suse.com
- Upgrade to rsyslog 8.2306.0
* 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
* 2023-06-08: Add new global config option "libcapng.default"
* 2023-06-08: imjournal: Add FileCreateMode module parameter
* 2023-04-17: core bugfix: potential segfault on busy systems
* 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred
* 2023-05-24: CI: update base ubuntu image for github actions
* 2023-05-16: OMHIREDIS::ADDED:: New support for 'stream' mode
* 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities
* 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure
* 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate
* 2023-04-25: IMHIREDIS::ADDED:: New support for 'stream' mode
* 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module
* 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes
[#]## CHANGED
- [IMHIREDIS] factorize code for different modes
- [IMHIREDIS] Clean and improve logging lines
- [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive)
- [IMHIREDIS] Set 'key' action parameter to REQUIRED
- [IMHIREDIS] Use known message length instead of calculating it when
enqueuing message
[#]## ADDED
- [IMHIREDIS] Missing redis replies' types in enumeration
[#]## FIXED
- [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList
- [IMHIREDIS] Correctly print input mode's value in logs when set incorrectly
* 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo
* 2023-03-21: modify testbench test to detect wrong imptcp truncation
* 2023-03-21: imptcp bugfix: spam log on oversize message
* 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
* 2023-03-13: Remove halted LGTM badges on README
* 2023-02-16: Do not preserve capabilities when changing credentials
* 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset
* 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well
* 2023-01-18: core/template: implement negative position.to
* 2023-01-18: CI: fix github CodeQL settings
* 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped
* 2023-01-17: Adjust the capability set
* 2023-01-13: substring function: enhancement and hardening
* 2023-01-11: omfile: add action parameters "rotation.*"
* 2023-01-11: CI: use newer version of zookeeper
* 2023-01-09: ffaup fix : memory corruption with concurrent workers
* 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback
* 2022-12-30: testbench: add test for invalid json template generation
* 2022-12-30: core bugfix: template system may generate invalid json
* 2022-12-28: Fixed wrong type conversion in cstrLen()
* 2022-12-08: Add CodeQL workflow for GitHub code scanning
* Tue Dec 27 2022 lnussel@suse.com
- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Tue Dec 06 2022 michael@stroeder.com
- Upgrade to rsyslog 8.2212.0
* 2022-12-05: testbench: make python http server based tests more reliable
* 2022-12-05: omprog bugfix: invalid status handling at called program startup
* 2022-11-29: testbench bugfix: wrong message injection object of instance 1
* 2022-11-21: rsyslog.conf man page bugfix: description of selectors
* 2022-11-18: imtcp bugfix: legacy config directives did no longer work
* 2022-11-16: ksi bugfix: sending of too many signing requests fixed.
* 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode
* 2022-11-02: imjournal: add second fallback to _COMM
* 2022-10-25: core bugfix: local hostname invalid if no global() config object given
* 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure
* Tue Oct 18 2022 michael@stroeder.com
- Upgrade to rsyslog 8.2210.0
* 2022-10-13: fix NetBSD build issue
* 2022-10-12: omrabbitmq: Add TLS support
* 2022-09-14: config: add "abortOnFailedQueueStartup" global config parameter
* 2022-09-07: cor bugfix: leak in helper function SetString
* 2022-09-07: core bugfix: correct local host name after config processing
* 2022-08-31: imtcp: add option notifyonconnectionopen
* 2022-08-26: openssl TLS driver: add mechanism to include extra CA files parameter
* 2022-08-19: fix compile issue with older gcc compilers
* Tue Aug 09 2022 michael@stroeder.com
- added libzstd-devel as build dependency
- Upgrade to rsyslog 8.2208.0
* 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed.
* 2022-08-09: imjournal bugfix: segmentation fault in close journal
* 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode="x509/fingerprint"
* 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated
* 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays.
* 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened.
* 2022-08-04: openssl: add support to split tls commands by semicolon
* 2022-08-04: openssl subsystem bugfix: build issue on Solaris
* 2022-08-04: openssl: add more details to error messages
* 2022-08-04: omclickhouse: capture additional exceptions
* 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection.
* 2022-07-21: imptcp: slight tuning
* 2022-07-20: template procesing/json: performance optimization
* 2022-07-19: core bugfix: memory leak when free action worker data table
* 2022-07-13: omfile: support for zstd compression
* 2022-07-07: stream cleanup: move error message to debug log, only
* 2022-07-04: mmdblookup bugfix: Don't crash Rsyslog on mmdb file errors
* 2022-06-28: build error fix: libbson requires out-of-date language constructs
* 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x
* Tue Jun 14 2022 michael@stroeder.com
- Upgrade to rsyslog 8.2206.0
* 2022-05-25: omelastisearch: allow omitting _type field
* 2022-05-18: tcpsrv/imtcp: slight performance improvements
* 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic
* 2022-05-11: omelasticsearch: several support option for ElasticSearch 8
- config params searchIndex and documentType can be empty
- support for Data Stream API
- new config param esVersion.major
* 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions
* 2022-05-05: net bugfix: potential buffer overrun
fixes CVE-2022-24903
Advisory:
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243
* 2022-05-05: imptcp: set OS worker thread name
* 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized
* 2022-04-22: mmdblookup fix: wrong copy of buffer
* 2022-04-22: mmdblookup: several enhancements
- support arrays in MMDB entry
- support escaped quotes '"' in MMDB entry
- support '<' characters in MMDB entry, when in a field
- support '}' characters in MMDB entry, when in a field
* Sun May 08 2022 andreas.stieger@gmx.de
- rsyslog 8.2204.1:
* CVE-2022-24903: potential buffer overrun in imptcp, imtcp,
imgssapi and others (boo#1199061)
* Tue Apr 19 2022 michael@stroeder.com
- Upgrade to rsyslog 8.2204.0
* 2022-04-18: gnutls bugfix: possibility of infinite loop
* 2022-04-17: core/bugfix: errorfile could grow over max configures size
* 2022-04-17: omkafka bugfix: potential misadressing
* 2022-04-06: added new "FullJSONFmt" standard template (with addtl fields)
* 2022-04-04: imfile: potential processing delay
* 2022-04-04: bugfix: cosmetic data races
* 2022-04-01: add property options to support ISO week/year number
* 2022-04-01: core bugfix: "action suspended" message was emitted even when turned off
* 2022-03-31: testbench: add more tests for rscript comparison operations
* 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker
* 2022-03-20: refactor: Move the parser directive to the main config
* 2022-03-16: refactor: ake the main message queue part of the config
* regression bugfix: rsyslog may segfault during startup
* regression fix: script string comparison did not work correctly
* Mon Mar 14 2022 thomas.blume@suse.com
- remove invalid dependencies from systemd service unit
(bsc#1196795, bsc#1196359)
* Tue Feb 15 2022 michael@stroeder.com
- Upgrade to rsyslog 8.2202.0
* 2022-02-14: imfile bugfix: remove cause for "internal error message" (not causing harm)
* 2022-02-04: rscript bugfix: literal numbers were not compared correctly
* 2022-02-04: omelasticsearch bugfix: indexSuccess impstats counter in bulkmode wrong
* 2022-01-17: imkmsg bugfix: effectively disabled input on error reading kmsg
* 2022-01-17: imtcp bugfix: worker threads were not properly terminated
* 2022-01-07: omlibdbi bugfix: use-after-free bug
* 2022-01-06: omhttp bugfix: memory leak in lokirest batchmode
* Wed Jan 19 2022 thomas.blume@suse.com
- add service dependencies for remote logging (bsc#1194669)
- update config example in remote.conf to match upstream documentation
* Thu Dec 16 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2112.0
* 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor
* 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime
* 2021-11-22: new contribtion: URL parser module function using libfa
* 2021-11-18: mmanon: relax IPv6 detection - improve anonymization
* 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named
* 2021-11-10: omsnmp: update module to current IP best practices
* 2021-10-27: ommysql: fix threading bug
* 2021-10-25: testbench: false positive when impstats was not built
* 2021-10-25: imtcp: add support for permittedPeers setting at input() level
* Thu Oct 21 2021 thomas.blume@suse.com
- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833)
* this legacy setting from pre-systemd times is obsolete
* Wed Oct 20 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2110.0:
* 2021-10-13: config bugfix: global(security.abortonidresolutionfail=) did not work
when used with rscript based configuration, it was not checked.
* 2021-10-13: config bugfix: global param $privDropToUser did not work correctly
The parameter was not implemented for rscript based configuration and
did not properly apply to legacy configuration. In essence, it almost always
did not work as expected.
see also: https://github.com/rsyslog/rsyslog/issues/4642
see also: https://github.com/rsyslog/rsyslog/commit/cbcaf2c7e5b67e5465e47bc7cc67af2eae47bd31
* 2021-10-12: rscript bugfix: ruleset called async when ruleset had queue.type="direct"
The call rscript statement is able to call a rule set either synchronously or
asynchronously. We did this, because practice showed that both modes
are needed. For various reasons we decided to make async
calls if the ruleset has a queue assigned and sync if not.
To know if a "queue is assigned" we just checked if queue parameters were
given. It was overlookeded the case of someone explicitly specifying a
"direct queue", aka "no queue". As such, queue="direct" triggered async
calls. That in turn meant that when a write operation to a variable was
made inside that rule set, other rulesets could or could not see the
write. While if was often not seen, this was a data race where the
change could also be seen by the outside.
This is now fixed. No matter if queue.type="direct" is specified or
left out, the call will always by synchronous. Any values written to
variables will also be seen by the "outside world" in later processing
stages.
Note that this has some potential to BREAK EXISTING CONFIGURATIONS.
We deem this acceptable because:
1. this was racy at all, so unexpected behaviour could alwas occur
2. it is actually unlikely that someone used the triggering conditions
in practice. But we can not outrule this, especially when the
configuration was auto-generated.
Potential compatibility issues can be solved by defining a small
array-memory queue on the ruleset in question instead of specifying
direct type.
Again, we expect that almost all users will never experience any
problems. If you do, however, please let us know: we may add an
option to re-enable the bug.
* 2021-10-12: ksi bugfix: locking bug fixed in rsksiCtxOpenFile
Thanks to Taavi Valjaots for the patch.
* 2021-10-11: core bugfix: fix typo in error message
Thanks to github user jkschulz for the patch.
* 2021-10-11: tcpsrv bugfix: compilation without exceptions
tcpsrv.c:992:1: error: label at end of compound statement
finalize_it:
^~~~~~~~~~~
Quoting from pthread.h:
pthread_cleanup_push and pthread_cleanup_pop are macros and must always
be used in matching pairs at the same nesting level of braces.
Amends commit bcdd220142ec9eb106550195ba331fd114adb0bd.
Thanks to Orgad Shaneh for the patch.
* 2021-10-11: mkubernetes bugfix: no connection retry to kubernetes APP
When connection to the kubernates API was not possible, mmkubernetes
did not retry. This does now happen via regular rsyslog retry
mechanism.
Thanks to github user jayme-github for the analysis and patch.
closes https://github.com/rsyslog/rsyslog/issues/4669
* 2021-10-11: openssl bugfix: Correct gnutlsPriorityString (custom ciphers) behaviour
* Only apply default anon ciphers if gnutlsPriorityString is NULL and
Authentication Mode is set to anon. Otherwise we do not set them
as they overwrite custom Ciphers.
* Added two tests for custom cipher configuration (anon/certvalid mode).
* Add call for applyGnutlsPriorityString if gnutlsPriorityString changes.
* Merged openssl init code from Connect into osslInitSession
closes: https://github.com/rsyslog/rsyslog/issues/4686
* 2021-10-11: build issue: handle undefined MAXPATHLEN, PATH_MAX
While we handled missing PATH_MAX, we did not handle missing MAXPATHLEN.
This happens under GNU/Hurd, because there is no official limit. However,
extremely long pathes are extremely uncommon, so we do not want to
use slow dynamic alloc each time we need to build pathes. So we
impose a limit of 4KiB, which should be fairly enough. Note that
this obviously increases stack requirements in GNU/Hurd.
As suggested by Michael Biebl, we have now implemented a generic
approach to handle this via autoconf.
* 2021-09-12: openssl: extended output information on connection failure
Now includes the remote client/server IP address in the log output.
* 2021-09-12: imhttp enhancements - query parameter ingestion & basic auth support
* Basic Authentication support & tests
* configured via imhttp option "basicAuthFile". This option should be configured
to point to your htpasswd file generated via a standard htpasswd tool.
tests:
* imhttp-post-payload-basic-auth.sh
* imhttp-post-payload-basic-auth-vg.sh
* Query parameter ingestion capability & tests
use t `addmetadata` option to inject query parameters into
metadata for imhttp input.
DISTRO PACKAGERS BEWARE: NEW DEPENDENCY FOR IMHTTP:
libaprutil (libaprutil1-dev on debian'ish, apr-util-devel on Red Hat)
Thanks to Nelson Yen for the patch.
* 2021-09-07: testbench bugfix: privdrop tests under root user did not work
When running under root, the privdrop tests did not properly work. This
patch fixes the issue and skips test where necessary.
This also includes some modernization of the related tests.
closes https://github.com/rsyslog/rsyslog/issues/4619
* 2021-09-07: core/ratelimiting: fix rate limiting for already parsed messages
Rate limiting may not have worked if the considered message had already
been parsed (not having NEEDS_PARSING in msgFlags).
This affects also imuxsock in its default configuration
(useSpecialParser="true" and ratelimit.severity="1")
* 2021-09-07: core bugfix: use of property $wday terminates string
When $wday is used inside a template, all template parts after it
are ignored. For exmaple:
template(name="json_filename" type="string" string="/var/log/%$wday%.log")
would generate something like "/var/log/0" - the ".log" part would be
missing. For the same reason, $wday can not reliably checked in script
filters.
Thanks to Alain Thivillon for reporting the bug and providing an
excellent analysis, which essentiellay was exactly this fix here.
closes https://github.com/rsyslog/rsyslog/issues/4670
* 2021-09-07: core/queue bugfix: potential misadressing when queue discarded messages
When a discard mark was set, the queue was very busy and discarded messages, a
NULL pointer access could happen. Depending on circumstances, several problems
could occur, including a SEGFAULT. This is now fixed.
closes: https://github.com/rsyslog/rsyslog/issues/4437
* 2021-09-07: imdiga bugfix: iOverallQueueSize calculation could be incorrect
This issue only affects testbench and rsyslog development debugging. The active
messages counter, used for synchronizing test steps, went wrong when the queue
discarded messages on it's consumer thread. Now fixed.
* 2021-09-06: gnutls driver: SAN priority did not work correctly on server side
PrioritizeSAN was not propagated when accepting a new connection, this is now fixed.
Thanks to Attila Lakatos for the patch.
* 2021-08-24: config: implement script-equavalent for $PrivDrop* statements
closes https://github.com/rsyslog/rsyslog/issues/891
* Wed Aug 18 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2108.0:
* 2021-08-16: openssl tls: Improved error message output on tls failures.
closes: https://github.com/rsyslog/rsyslog/issues/4645
* 2021-08-16: impstats: add percentile metrics tracking functionality
Brief overview:
TO configure tracking percentile metrics in rainerscript:
User would need to define:
- which percentile to track, such as [p50, p99, etc.]
- window size - note, this correlates directly with memory usage to
track the percentiles.
To track a value, user would call built-in function `percentile_observe()` in their configurations to
record an integer value, and percentile metrics would be emitted every
impstats interval.
Thanks to Nelson Yen for the patch.
* 2021-08-12: imfile: add parameter "ignoreolderthanoption"
instructs imfile not to ingest a file that has not been modified in the
specified number of seconds.
Thanks to github user yanjunli76 for the patch (submitted from Nelson Yen)
* 2021-08-10: imklog bugfix: invalid memory adressing, could cause abort
This is a regeression from commit 94c4a87. It introduced a free() call
using an object that was no longer valid (the main pointer to the
to-be-freed object) was already freed at time of use. This could
cause various issues, including a segfault.
Note: this bug was triggerred only during late phase of rsyslog
shutdown, so it did not affect regular operation.
Special thanks to github user wxiaoguang for analyzing the issue
and providing a draft fix proposal, on which this patch builds.
see also https://github.com/rsyslog/rsyslog/pull/4629
closes https://github.com/rsyslog/rsyslog/issues/4625
* 2021-08-09: imfile bugfix: deleteStateOnFileDelete missed some state files
When the log file is deleted, imfile would attempt to delete the statefile but it
was missing the file_id part of the statefile name. This means the statefiles were
only removed in the log file was less than 512 characters, because for very small
files the file ID hash is not created. This lead to some state files not being
deleted.
Thanks to pearseimperva for the patch.
* 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0
If imfile is ingesting log files with readMode set to 2 or 1, the resulting
messages all have a '#' character at the end. This patch corrects the behaviour.
Note: if some external script "supported" the bug of extra hash character at
the end of line, it may be necessary to update them.
closes https://github.com/rsyslog/rsyslog/issues/4491
* 2021-08-09: omelasticsearch bugfix: errorFile mutex was not consistently locked
Lock the file during SIGHUPs to avoid issues with concurrent accesses by
writeDataError().
Thanks to François Poirotte for the patch.
* 2021-08-09: imudp: add socket type (IPv4 vs. 6) to input name
Most importantly, the input name is used for stats counter names as
well. Previously, the same name was used for IPv4 and IPv6, so we had
two counters with an equal name. That left users puzzled.
Unfortunately, this change can potentially require changes to existing
analysis scripts, as the name is now slightly different.
closes https://github.com/rsyslog/rsyslog/issues/4364
* 2021-08-06: omfwd: add capability for action-specific TLS certificate settings
This permits to override the global definitions for TLS certificates
at the action() level.
* 2021-08-06: imfile bugfix: file handle leak if "freshStartTail" was turned on
* 2021-08-05: imtcp: permit to use different certificate files per input/action
This completes the ability to override global/default TLS settings at the imtcp
input() level. Support for using multiple CAs/Certs per Connection is now provided.
* 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set
The interval was accidentally set to keep alive interval. This has been
corrected.
closes https://github.com/rsyslog/rsyslog/issues/4609
* 2021-07-08: openssl network driver bugfix: small memory leak
Fixes a static, non-growing memory leak which existed when parameter
"GnutTLSPriorityString" was used. This was primarily a cosmetic issue,
but caused some grief during development in regard to memory leak
detectors.
Note: yes, this is for openssl -- the parameter name is historical.
* 2021-07-07: psrv bugfix: abort if no listener could be started
Modules (like imtcp and imdiag) which use tcpsrv could abort or
otherwise malfunction if no listener for a specific input could
be started.
Found during implementing a new feature, no report from practice.
But could very well happen.
* 2021-07-07: mmkubernetes bugfix: apiserver error handling
- Added graceful handling of apiserver errors with unexpected responses,
i.e., anything other than 200, 404, or 429. Idea is that apiserver
transient error state will recover. We don't want mmkubernetes to miss
metadata resolution for containers that don't have cached metadata.
During these transient error states, mmkubernetes will provide basic
container file path based resolution of namespace and pod metadata for
new pods whose metadata is not yet cached. After this error state
recovers, mmkubernetes is expected to resume its metadata resolution as
expected.
- Added a unit test case for apiserver return 500 with changes to mock server
- Fixed existing unit test that was failing due to missing expected results file
- Added mmkubernetes unit tests to testbench
Thanks to Abdul Waheed for the patch (submitted from Nelson Yen).
* 2021-07-07: ommongodb bugfixes
- Fix Segmentation fault when server is down
- Add server connexion check while resuming
Thanks to Kevin Guillemot for the patch.
* 2021-06-28: omkafka improvements
- drain librdkafka queues and retry later during rsyslog restart or hup. This
re-injects messages into rsyslog's native queues.
- add statsname on per kafka instance for better visibility
- omkafka - count errors related ssl as "errors_ssl"
Thanks to Nelson Yen for the patch.
* 2021-06-23: some CI/QA improvements, Travis-CI disabled
For the time being, Travis CI is disabled because it was outdated and Travis also
changed their system. We will re-evaluate if we re-enable it. Since quite a while
the Travits tests were redundant with the rest of CI, so this does not reduce
coverage.
* 2021-06-23: omhttp bugfix: dynrestpath param in batch mode invalid
When batchmode was used, the templates could not be used to
expand dynrestpath. We are now storing the restpath param
within the batch data if we are in batch mode.
When we are in batch mode, and the restpath value changes, the
batch is submitted and reinitialized
closes: https://github.com/rsyslog/rsyslog/issues/4567
* 2021-06-17: add predefined template RSYSLOG_SyslogRFC5424Format
This is essentially the same as RSYSLOG_SyslogProtocol23Format with
a better name and a fix to remove the unnecessary LF at the end of
the message.
The different name also enables us to fix the LF issue without
any concern about backwards compatibility.
closes https://github.com/rsyslog/rsyslog/issues/4384
* 2021-06-17: impstats/bugfix: _sender_stats reports integer counter as string
Note that this introduces a small backwards incompatibility: in previous output
the field was of string type, now it is integer (as intended). We discussed this
on the mailing list and the overwhelming thought was that this is not a problem
because almost all analysis backends are able to cover that format change. This made
the bugfix essentially costmetic.
HOWEVER, if you still experience issues, please let us know. We can add an option
to provide the previous format, and just spared to do so because there was no
evidence it was needed.
* Tue Jun 15 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2106.0:
* NOTE: the prime new feature is support for TLS and non-TLS connections
via imtcp in parallel. Furthermore, most TLS parameters can now be overriden
at the input() level. The notable exceptions are certificate files, something
that is due to be implemented as next step.
* 2021-06-14: new global option "parser.supportCompressionExtension"
This permits to turn off rsyslog's single-message compression extension
when it interferes with non-syslog message processing (the parser
subsystem expects syslog messages, not generic text)
closes https://github.com/rsyslog/rsyslog/issues/4598
* 2021-05-12: imtcp: add more override config params to input()
It is now possible to override all module parameters at the input() level. Module
parameters serve as defaults. Existing configs need no modification.
* 2021-05-06: imtcp: add stream driver parameter to input() configuration
This permits to have different inputs use different stream drivers
and stream driver parameters.
closes https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-29: imtcp: permit to run multiple inputs in parallel
Previously, a single server was used to run all imtcp inputs. This
had a couple of drawsbacks. First and foremost, we could not use
different stream drivers in the varios inputs. This patch now
provides a baseline to do that, but does still not implement the
capability (in this sense it is a staging patch).
Secondly, we now ensure that each input has at least one exclusive
thread for processing, untangling the performance of multiple
inputs from each other.
see also: https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown
tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and,
in theory, also others - even ones we do not know about). However, the
internal synchornization did not properly take multiple tcpsrv users
in consideration.
As such, a single user could hang under some circumstances. This was
caused by improperly awaking all users from a pthread condition wait.
That in turn could lead to some sluggish behaviour and, in rare cases,
a hang at shutdown.
Note: it was highly unlikely to experience real problems with the
officially provided modules.
* 2021-04-22: refactoring of syslog/tcp driver parameter passing
This has now been generalized to a parameter block, which makes it much cleaner and
also easier to add new parameters in the future.
* 2021-04-22: config script: add re_match_i() and re_extract_i() functions
This provides case-insensitive regex functionality.
closes https://github.com/rsyslog/rsyslog/issues/4429
* Tue Apr 20 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2104.0:
* rainerscript: call getgrnam_r repeatedly to get all group members
(bsc#1178490)
* new contributed module imhiredis
* new built-in function get_property() to access property vars
* mmdblookup: add support for mmdb DB reload on HUP
* script bugfix: empty array in foreach() improperly handled
* imjournal bugfixes (handle leak, empty file)
* new contributed function module fmunflatten
* test bugfix: some tests did not work with newer TLS library versions
* some improvements to project CI
* Fri Feb 26 2021 thomas.blume@suse.com
- update remote.conf example file to new 'Address' and 'Port' notation
(bsc#1182653)
* Tue Feb 16 2021 michael@stroeder.com
- HTTPS URLs used for source
- Upgrade to rsyslog 8.2102.0:
* omfwd: add stats counter for sent bytes
* omfwd: add error reporting configuration option
* action stats counter bugfix: failure count was not properly incremented
* action stats counter bugfix: resume count was not incremented
* omfwd bugfix: segfault or error if port not given
* lookup table bugfix: data race on lookup table reload
* testbench modernization
* testbench: fix invalid sequence of kafka tests runs
* testbench: fix kafkacat issues
* testbench: fix year-dependendt clickhouse test
* Tue Dec 08 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2012.0:
* testbench bugfix: some tests did not work in make distcheck
* immark: rewrite with many improvements
* usability: re-phrase error message to help users better understand cause
* add new system property $now-unixtimestamp
* omfwd: add new rate limit option
* omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default
* Thu Nov 26 2020 lnussel@suse.de
- prepare usrmerge (boo#1029961)
* Mon Nov 09 2020 thomas.blume@suse.com
- fix location and naming of journald dropin (bsc#1178288)
* Wed Oct 28 2020 thomas.blume@suse.com
- remove legacy stuff from specfile
* sysvinit is not supported anymore, so remove all tests
related to systemv in the specfile
* Tue Oct 20 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2010.0:
* gnutls TLS subsystem bugfix: handshake error handling
* core/msg bugfix: memory leak
* core/msg bugfix: segfault in jsonPathFindNext() when <root> not an object
* openssl TLS subsystem: improvments of error and status messages
* add 'exists()' script function to check if variable exists
* core bugfix: do not create empty JSON objects on non-existent key access
* gnutls subsysem bugfix: potential hang on session closure
* core/network bugfix: obey net.enableDNS=off when querying local hostname
* core bugfix: potential segfault on query of PROGRAMNAME property
* imtcp bugfix: broken connection not necessariy detected
* new module: imhttp - http input
* mmdarwin bugfix: potential zero uuid when reusing existing one
* imdocker bugfix: build issue on some platforms
* omudpspoof bugfix: make compatbile with Solaris build
* testbench fix: python 3 incompatibility
* core bugfix: segfault if disk-queue file cannot be created
* cosmetic: fix dummy module name in debug output
* config bugfix: intended warning emitted as error
* Sat Aug 29 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2008.0
Way too many changes since 8.39.0 to be listed here.
- Added custom unit file rsyslog.service because
systemd service file was removed from upstream project
- Removed obsolete patches:
* 0001-satisfy-gcc-flag-fno-common.patch
* rsyslog-pgsql-pkg-config.patch
* rsyslog-unit.patch
* Sat Jul 11 2020 kukuk@suse.com
- Use systemd_ordering instead of requiring to make rsyslog useable
in containers.
* Wed Apr 15 2020 rjschwei@suse.com
- Fix the URL for bug reporting, should not point to novell.com
(bsc#1173433)
* Thu Feb 06 2020 rtyler@brokenco.de
- Add support for omkafka which is now in Factory, and 15.x repos
* Thu Jan 09 2020 thomas.blume@suse.com
- avoid build error with gcc flag -fno-common (bsc#1160414)
* add 0001-satisfy-gcc-flag-fno-common.patch
* Thu Jul 25 2019 matthias.gerstner@suse.com
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Tue Mar 05 2019 dimstar@opensuse.org
- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the
right libraries/directories for postgresql. According to pgsql
upstream, pg_config must only be used to buildpgsql modules.
* Fri Feb 22 2019 Thomas.Blume@suse.com
- set default permissions before include directives (bsc#1126233)
* Logfile open modes depend on position in the config file, see
https://www.rsyslog.com/doc/rsconf1_filecreatemode.html
* Wed Nov 21 2018 egotthold@suse.com
- Upgrade to rsyslog 8.39.0
* imfile: improve truncation detection
* imjournal: work around journald excessive reloading behavior
* errmsg: remove no longer needed code
* queue bugfix: invalid error message on queue startup
* bugfix imrelp: regression with legacy configuration startup fail
* bugfix imudp: stall of connection and/or potential segfault
* bugfix gcry crypto driver: small memleak
* fix potential misadressing in encryption subsystem
* ksi subsystem changes
* bugfix core: regex compile error messages could be incorrect
* bugfix core: potential hang on rsyslog termination
* bugfix imkafka: system hang when backgrounded
* bugfix imfile: file change was not reliably detected
* bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr
* bugfix queue subsystem: DA queue did ignore encryption settings
* bugfix KSI: lmsig-ksils12 module skips signing the last block
* bugfix fmhash: function hash64mod sometimes returned wrong result
* bugfix core/debug: data written to random fd 2 under some debug settings
* Tue Oct 16 2018 Thomas.Blume@suse.com
- rsyslog configuration cleanup by filter rules in separate files (bug#1102720)
* add parsing of additional filter rules in /etc/rsyslog.d/*.frule
* add acpid.frule, firewall.frule, NetworkManager.frule
* Wed Oct 10 2018 kukuk@suse.de
- Enable ForwardToSyslog for journald to get syslog messages
[bsc#1110456]
* Tue Sep 18 2018 michael@stroeder.com
- Update to rsyslog 8.38.0:
* imfile: support for endmsg.regex
* omhttp: new contribued module
* imrelp: add support for seting address to bind to (#894)
* ommysql: support mysql unix domain socket
* omusrmsg: do not fall back to max username length of 8
* various bug fixes and minor updates to other modules and core
* various fixes for memory leaks
* Thu Jul 19 2018 Thomas.Blume@suse.com
- remove references to obsolete SYSLOG_REQUIRES_NETWORK
variable (bsc#1101642)
* Wed Jun 27 2018 astieger@suse.com
- rsyslog 8.36.0:
* Liblogging-stdlog deprecated
* OpenSSL based TLS driver added in addition to GnuTLS
* GnuTLS TLS driver: support intermediate certificates
* imptcp: add ability to configure socket backlog
* fmhash: new hash function module
* updates and fixes to various modules
* omfwd: add support for bind-to-address for UDP
* mmkubernetes: new module
- updates and fixes to various modules
* Tue Jun 26 2018 Thomas.Blume@suse.com
- fix CVE-2015-3243 rsyslog: some log files are created world-readable
(bsc#935393)
* Sat Mar 24 2018 astieger@suse.com
- rsyslog 8.33.1:
* devcontainer: use some more sensible defaults
* auto-detect if running inside a container (as pid 1)
* config: add include() script object
* template: add option to generate json "container"
* core/template: add format jsonf to constant template entries
* config: add ability to disable config parameter ("config.enable")
* script: permit to use environment variables during configuration
* new global config parameter "shutdown.enable.ctlc"
* config optimizer: detect totally empty "if" statements and optimize them out
* template: constant entry can now also be formatted as json field
* omstdout: support for new-style configuration parameters added
* core: set TZ on startup if not already set
* imjournal bugfix: file handle leak during journal rotation
* lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
* script bugfix: replace() function worked incorrectly in some cases
* core bugfix: misadressing in external command parser
* core bugfix: small memory leak in external command parser
* core bugfix: string not properly terminated when RFC5424 MSGID is used
* bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
rsyslog pid, as it is no longer required for tracking under
systemd (-iNONE). Adjust rsyslog-unit.patch to match.
* Mon Mar 19 2018 kukuk@suse.de
- Use %license instead of %doc [bsc#1082318]
* Mon Feb 19 2018 Thomas.Blume@suse.com
- fix includes for apparmor profile (bsc#1080238)
* Fri Jan 26 2018 astieger@suse.com
- rsyslog 8.32.0
* libfastjson 0.99.8 required
* libczmq >= 3.0.2 is now required for omczmq
* libcurl is now needed for rsyslog core
* rsyslogd: add capability to specify that no pid file shall be written
* core improvements and bug fixes
* RainerScript improvements and bug fixes
* build fixes, including gcc7 fixes
drop 0001-imgssapi-fix-compiler-warnings.patch
* various bug fixes in multiple modules
* Fri Jan 19 2018 rgerhards@adiscon.com
- remove build dependency on libee
* Thu Dec 07 2017 kukuk@suse.de
- Disable news by default, we don't need to clobber all systems
with this for the very few remaining news servers
* Thu Nov 23 2017 rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
* Fri Nov 17 2017 astieger@suse.com
- Ensure user "news" exists - bsc#1068678
* Tue Nov 14 2017 astieger@suse.com
- rsyslog 8.30.0
* changed behaviour: all variables are now case-insensitive by default
* core: handle (JSON) variables in case-insensitive way
* imjournal: made switching to persistent journal in runtime possible
* mmanon: complete refactor and enhancements
* imfile: add "fileoffset" metadata
* RainerScript: add ltrim and rtrim functions
* core: report module name when suspending action
* core: add ability to limit number of error messages going to stderr
* tcpsrv subsystem: improvate clarity of some error messages
* imptcp: include module name in error msg
* imtcp: include module name in error msg
* tls improvement: better error message if certificate file cannot be read
* omfwd: slightly improved error messages during config parsing
* ommysql improvements
* ommysql bugfix: do not duplicate entries on failed transaction
* imtcp bugfix: parameter priorityString was ignored
* template/bugfix: invalid template option conflict detection
* core/actions: fix handling of data-induced errors
* core/action bugfix: no "action suspended" message during retry processing
* core/ratelimit bugfix: race can lead to segfault
* core bugfix: rsyslog aborts if errmsg is generated in early startup
* core bugfix: informational messages was logged with error severity
* core bugfix: --enable-debugless build was broken
* queue bugfix: file write error message was incorrect
* omrelp bugfix: segfault when rebindinterval parameter is used
* omkafka bugfix: invalid load of failedmsg file on startup if disabled
* kafka bugfix: problem on invalid kafka configuration values
* imudp bugfix: UDP oversize message not properly handled
* core bugfix: memory corruption during configuration parsing
* core bugfix: race on worker thread termination during shutdown
* omelasticsearch: avoid ES5 warnings while sending json in bulkmode
* omelasticsearch bugfix: incompatibility with newer ElasticSearch version
* imptcp bugfix: invalid mutex addressing on some platforms
* imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
* libfastjson 0.99.7 is now mandatory
* libsystemd-journal >= 234 is now recommended
- packaging:
* add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch
* Tue Aug 08 2017 astieger@suse.com
- rsyslog 8.29.0:
* imptcp: add experimental parameter "multiline"
* imptcp: framing-related error messages now also indicate remote peer
* imtcp: framing-related error messages now also indicate remote peer
* imptcp: add session statistics conunter
* imtcp: add ability to specify GnuTLS priority string
* impstats: add new ressoure counter "openfiles"
* pmnormalize: new parser module
* core/queue: provide informational messages on thread startup and shutdown
* omfwd/udp: improve error reporting, depricate maxerrormessages parameter
* core: add parameters debug.file and debug.whitelist
* core/net.c: improve UDP socket creation error messages
* omfwd/udp: add "udp.sendbuf" parameter
* core: make rsyslog internal message rate-limiter configurable
* omelasticsearch bugfixes and changed ES5 API support
+ avoid 404 during health check
+ avoid ES5 warnings while sending json
+ bugfix for memomry leak while writing error file
* imfile bugfix: wildcard detection issue on path wildcards
* omfwd bugfix: always give reason for suspension
* omfwd bugfix: configured compression level was not properly used
* imptcp bugfix: potential socket leak on session shutdown
* omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
* imklog: fix permitnonkernelfacility not working
* impstats bugfix: impstats does not handle HUP
* core bugfix: segfault after configuration errors
* core/queue bugfixes
* lmsig_ksi: removed pre-KSI_LS12 components
* Sun Jul 30 2017 michael@stroeder.com
Version 8.28.0 [v8-stable] 2017-06-27
* omfwd: add parameter "tcp_frameDelimiter"
* omkafka: large refactor of kafka subsystem
* imfile: improved handling of atomically renamed file (w/ wildcards)
* imfile: add capability to truncate oversize messages or split into multiple
* mmdblookup fixes and extensions
* bugfix: fixed multiple memory leaks
* imptcp: add new parameter "flowControl"
* imrelp: add "maxDataSize" config parameter
* multiple modules: gtls: improve error if certificate file can't be opened
* omsnare: allow different tab escapes
* omelasticsearch: converted to use libfastjson instead of json-c
* imjournal: _PID fallback
* added fallback for _PID proprety when SYSLOG_PID is not available
* introduced new option "usepid" which sets which property should
rsyslog use, it has 3 states system|syslog|both, default is both
* deprecated "usepidfromsystem" option, still can be used
and override the "usepid"
* it is possible to revert previous default with usepid="syslog"
* multiple modules: add better error messages when regcomp is failing
* omhiredis: fix build warnings
* imfile bugfix: files mv-ed in into directory were not handled
* omprog bugfix: execve() incorrectly called
* imfile bugfix: multiline timeout did not work if state file exists
* lmsig_ksi-ls12 bugfix: build problems on some platforms
* core bugfix: invalid object type assertion
* regression fix: local hostname was not always detected properly...
* bugfix: format security issues in zmq3 modules (bsc#1051798)
* bugfix build system: add libksi only to those binaries that need it
* bugfix KSI ls12 components: invalid tree height calculation
* Mon Jun 05 2017 tchvatal@suse.com
- Drop module-guardtime package
* Upstream libgt died and it does not work with new openssl
* Thu May 18 2017 dziolkowski@suse.com
Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
* optionally emit an error message if incoming messages are truncated
* optionally emit connection tracking message (on connection create and
close)
* add "maxFrameSize" parameter to specify the maximum size permitted
in octet-counted mode
* add parameter "discardTruncatedMsg" to permit truncation of
oversize messages
* improve octect-counted mode detection: if the octet count is larger
then the set frame size (or overly large in general), it is now
assumed that octet-stuffing mode is used. This probably solves a
number of issues seen in real deployments.
- imtcp enhancements:
* add parameter "discardTruncatedMsg" to permit truncation of
oversize messages
* add "maxFrameSize" parameter to specify the maximum size permitted
in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
for configured non-existing file. In polling mode, this message
appeared once in each polling cycle, causing a potentially very large
amout of error messages. Note that they were usually emitted too
infrequently to trigger the error message rate limiter, albeit often
enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
be found
- imfile: add parameter "fileNotFoundError" to optinally disable
"file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
Gethostbyname() is generally considered obsolete, is not reentrant and
cannot really work with IPv6. Changed the only place in rsyslog where
this call remained.
Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
See also https://github.com/rsyslog/rsyslog/issues/1508
Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
both for the actual limit procesing as well as warning messages emitted
see also https://github.com/rsyslog/rsyslog/pull/1520
Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
see also https://github.com/rsyslog/rsyslog/issues/1494
Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message
* Thu Apr 06 2017 astieger@suse.com
- rsyslog 8.26.0:
* liblognorm 2.0.3 is required for mmnormalize
* enable internal error messages at all times
* core: added logging name of source of rate-limited messages
* omfwd: omfwd: add support for network namespaces
* imrelp: honor input name if provided when submitting to impstats
* imptcp: add ability to set owner/group/access perms for uds
* mmnormalize: add ability to load a rulebase from action() parameter
* pmrfc3164 improvements
+ permit to ignore leading space in MSG
+ permit to use at-sign in host names
+ permit to require tag to end in colon
* add new global parameter "umask"
* core: make use of -T command line option more secure
* omfile: add error if both file and dynafile are set
* bugfix: build problem on MacOS (not a supported platform)
* regression fix: in 8.25, str2num() returned error on empty string
* bugfix omsnmp: improper handling of new-style configuration parameters
* bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
* bugfix imfile: wrong files were monitored when using multiple imfile inputs
* bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
* bugfix: immark emitted error messages with text "imuxsock"
* bugfix tcpflood: build failed if RELP was disabled
* fix gcc6 compiler warnings
* the output module array passing interface has been removed
* Mon Mar 06 2017 astieger@suse.com
- use 8.25.0 documentation tarball
* Thu Feb 23 2017 astieger@suse.com
- rsyslog 8.25.0:
* imfile: add support for wildcards in directory names
* add new global option "parser.PermitSlashInProgramname"
* mmdblookup: fix build issues, code cleanup
* improved debug output for queue corruption cases
* an error message is now displayed when a directory owner cannot be set
* rainerscript: add new function ipv42num
* rainerscript: add new function num2ipv4
* bugfix: ratelimiter does not work correctly is time is set back
* core: fix potential message loss in old-style transactional interface
* bugfix queue subsystem: queue corrupted if certain msg props are used
* bugfix imjournal: fixed situation when time goes backwards
* bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
* bugfix core: str2num mishandling empty strings
* bugfix rainerscript: set/unset statement do not check variable name validity
* bugfix mmrm1stspace: last character of rawmsg property was doubled
* bugfix imtcp: fix very small (cosmetic) memory leak
* However, the leak breaks memleak checks in the testbench.
* Fri Feb 10 2017 ndas@suse.com
- sync bug and fate numbers from IBS changes.
* Sun Jan 15 2017 astieger@suse.com
- rsyslog 8.24.0(fate#320546):
* mmrm1stspace: new module; removes first space in MSG if present
* KSI signature provider: file permissions can now be specified
* omzmq: new features
* when the hostname is empty, we now use "localhost-empty-hostname"
* omelasticsearch: remove "asyncrepl" config parameter
* omfwd: Add support for bind-to-device (see below on same for imudp)
* imudp: Add support for bind-to-device
* imudp: limit rcvbufsize parameter to max 1GiB
* rainerscript: implement new "call_indirect" statement
* bugfix imjournal: make state file handling more robust
* bugfix core: lookup table reload was not properly integrated
* bugfix core: potential dealock on shutdown
* bugfix ommongodb: did not work in v8 due to invalid indirection
* bugfix ommongodb: fix tryResume handling
* bugfix omfwd: retry processing was not done correctly, could stall
* bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
* mmdblookup: new maxminddb lookup message modify plugin
* Mon Dec 12 2016 dimstar@opensuse.org
- Replace pkgconfig(libsystemd-journal) BuildRequires with
pkgconfig(libsystemd): the sub-libraries have been merged into
libsystemd since 209 and have ultimately been removed since 230.
* Sun Dec 04 2016 astieger@suse.com
- rsyslog 8.23.0:
* requiring libfastjson 0.99.3
* KSI signatures: removed SHA2-224 hash algorithm
* imfile: new timeout feature for multi-line reads
* omfile: improve robustness against network file system failures
* pmaixforwardedfrom: support for AIX syslogd -s option
* omelasticsearch: add ability to specify max http request size
* omelasticsearch: high availability addressing of ElasticSearch cluster
* omelasticsearch: make compatible with ElasticSearch 2.x and 5.x
* omhiredis: add dynakey attribute.
* omtcl: new contributed module
* RainerScript: provide a capability to set environment variables
* lookup tables: improved error checking
* queue subsystem: add configuration parameter "queue.samplinginterval"
* various bug fixes
* rsgtutil: option to specify KSI publications file certificate constraints
- includes changes from 8.22.0:
* ompgsql: add template support
* generate somewhat better error message on config file syntax error
- includes changes from 8.21.0:
* CHANGE OF BEHAVIOUR:
by default, internal messages are no longer logged via the internal
bridge to rsyslog but via the syslog() API call [either directly or
via liblogging). For the typical single-rsyslogd-instance installation this
is mostly unnoticable (except for some additional latency). If multiple
instances are run, only the "main" (the one processing system log messages)
will see all messages. To return to the old behaviour, do either of those
two:
1) add in rsyslog.conf:
global(processInternalMessages="on")
2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1
This will set a new default - the value can still be overwritten via
rsyslog.conf (method 1). Note that the environment variable must be
set in your **startup script**.
For more information, please visit
http://www.rsyslog.com/rsyslog-error-reporting-improved/
* slightly improved TLS syslog error messages
* queue subsystem: improved robustness
* Tue Jul 19 2016 astieger@suse.com
- rsyslog 8.20.0:
* omrelp: add configurable connection timeout
* pmrfc3164: add support for slashes in hostname
* bugfix omfile: handle chown() failure correctly
* omfile now better conveys status of unwritable files back to core
* config files recursively including themselfes are now detected
* refactored code to not emit compiler warnings in "strict mode"
* bugfix: fix some issues with action CommitTransaction() handling
* bugfix omqmqp1: connecting to the message bus fails on nonstandard port
* testbench/CI enhancements
- Build requirements:
* librelp 1.2.12
* Sat Jun 04 2016 astieger@suse.com
- rsyslog 8.19.0:
* omelasticsearch: add option to permit unsigned certs
* imrelp: better error codes on unvailablity of TLS options
* default stack size for inputs has been explicitely set to 4MiB
* performance improvements
* miscellaneous minor cleanup
* fix: potential misadressing in template config processing
* bugfix omfile: async output file writing does not respect
flushing
* bugfix imfile: corrupted multi-line message when state data was
persisted
* bugfix imfile: missing newline after first line of multiline
message
* bugfix: dynstats unusedMetricTtl bug
* bugfix build system: build was broken on SunOS
* bugfix: afterRun entry point not correctly called
* bugfix dynstats: do not leak file handles
* bugfix omelasticsearch: disable libCURL signal handling
* bugfix omelasticsearc: some regressions were fixed
* improved wording: gnutls error message points to potential
cause
* Tue Apr 19 2016 astieger@suse.com
- rsyslog 8.18.0(bnc#958728):
* templates: add option to convert timestamps to UTC
* omjournal: fix segfault (regression in 8.17.0)
* imptcp: added AF_UNIX support
* new template options
* compressSpace
* date-utc
* redis: support for authentication
* omkafka: makes kafka-producer on-HUP restart optional
* imfile: new "FreshStartTail" input parameter
* omjournal: fix libfastjson API issues
* ommongodb: fix json API issues
* dynamic stats subsystem: a couple of smaller changes
* foreach loop: now also iterates over objects (not just arrays)
* enhancement: queue subsystem is more robst in regard to some corruptions
* enhancement: Allow rsyslog to bind UDP ports even w/out specific
interface being up at the moment.
* new External plugin for sending metrics to SPM Monitoring SaaS
* bugfix imfile: fix memory corruption bug when appending @cee
* bugfix: memory misallocation if position.from and position.to is used
a negative amount of memory is tried to be allocated if position.from
is smaller than the buffer size (at least with json variables). This
usually leads to a segfault.
* bugfix: fix potential memleak in TCP allowed sender definition
* bugfix: $PrivDropToGroupID actually did a name lookup
* bugfix: small memory leak in imfile
* bugfix: double free in jsonmesg template
* bugfix: incorrect formatting of stats when CEE/Json format is used
* bugfix omfwd: new-style keepalive action parameters did not work
due to being inconsistently spelled inside the code. Note that legacy
parameters $keepalive... always worked
* bugfix: memory leaks in logctl utility
* bugfix omrelp: fix segfault if no port action parameter was given
* bugfix imtcp: Messages not terminated by a NL were discarded
* Sun Mar 13 2016 astieger@suse.com
- rsyslog 8.17.0:
* improve json variable performance
* new experimental feature: lookup table suport
* new feature: dynamic statistics counters
* new contributed plugin: omampq1 for AMQP 1.0-compliant brokers
* new set of UTC-based $now family of variables ($now-utc, $year-utc, ...)
* simplified locking when accessing message and local variables
* new global parameter "debug.unloadModules"
* timestamp handling: guard against invalid dates
* imfile: add "trimlineoverbytes" input paramter
* ommongodb: add support for extended json format for dates
* omjournal: add support for templates
* imuxsock: add "ruleset" input parameter(fate#320667)
* imptcp: performance improvements
* improve interface definition in some modules, e.g. mmanon, mmsequence
* rsgtutil: dump mode improvements
+ auto-detect signature file type
+ ability to dump hash chains for log extraction files
* bugfix: unixtimestamp date format was incorrectly computed (leap year)
* bugfix: date-ordinal date format was incorrectly computed (leap year)
* bugfix: some race when shutting down input module threads
* bugfix tcpflood: did not handle connection drops correct in TLS case
* bugfix: abort if global parameter value was wrong
* bugfix omkafka: fix potential NULL pointer addressing
* bugfix impstats: @cee cookie was prefixed to wrong fromat (json vs. cee)
* bugfix imfile: fix race during startup that could lead to some duplication
* bugfix: potential loss of single message at queue shutdown
* bugfix: potential deadlock with heavy variable access
* bugfix ommysql: on some platforms, serverport parameter had no effect
* bugfix omelasticsearch: invalid pointer dereference
* bugfix omhiredis: serverport config parameter did not reliably work
* bugfix rsgtutil: -h command line option did not work
* bugfix lexer: hex numbers were not properly represented
* bugfix TLS syslog: intermittent errors while sending data
* bugfix imfile: abort on startup if no slash was present in file name param
* bugfix rsgtutil: fixed abort when using short command line options
* bugfix rsgtutil: invalid computation of log record extraction file
* bugfix build system: KSI components could only be build if in default path
* Mon Feb 01 2016 astieger@suse.com
- rsyslog 8.16.0:
* rsgtutil: Added extraction support including loglines and hash
chains.
* new system properties for $NOW properties based on UTC
* various bug fixes and improvements
* Thu Jan 28 2016 mrueckert@suse.de
- fix build on sle11: use package name buildrequires instead of
pkgconfig
* Tue Jan 12 2016 astieger@suse.com
- build with libfastjson (mandatory from 8.16.0)
* Sat Jan 02 2016 astieger@suse.com
- rsyslog 8.15.0:
* KSI (incompatible changes):
+ KSI utilities: Added option to set publication url via
- -publications-server. Required for signature verification.
+ UserID and UserKey can be set by parameter
+ Fixed wrong TLV container for KSI signatures from 0905 to 0906.
+ somewhat improved error messages
+ Update for and use libksi 3.4.0.x
* New contributed modules:
+ pmpanngfw: for translating Palo Alto Networks logs
* pmciscoios: support for asterisk before timestamp added
* solr external output plugin much enhanced
* omrabbitmq: improvements
* add support for libfastjson (as a replacement for json-c)
* pmciscoios: support for some format variations
* improvments for 0mq modules:
+ omczmq - suspend / Retry handling
+ omczmq - improved efficiency
+ omczmq - added ability to set a timeout for sends
+ omczmq - set topics can be in separate frame (default) or
part of message frame (configurable)
+ imczmq - ZMQ_ROUTER support
* Note the upstream supported modules not enabled in SUSE package:
+ grok (mmgrok)
+ omkafka
* add support for building with libfastjson
* bugfix: invalid mutex handling in omfile async write mode
could lead to segfault, even though highly unlikely (caught by
testbench on a single platform) (bsc#1000488)
* Sat Nov 07 2015 astieger@suse.com
- rsyslog 8.14.0:
* add property "rawmsg-after-pri"
* bugfix: potential misadresseing in imfile
* bugfix: re_extract RainerScript function did not work
* Thu Sep 24 2015 astieger@suse.com
- rsyslog 8.13.0:
* ZeroMQ enhancements
* Redis enhancements
* mmnormalize: liblognorm error messages are now emitted via
regular rsyslog error reporting mechanism (aka "are now logged")
* networking improvements
- drop rsyslog-8.12.0-parallel-build.patch, is upstream
- drop rsyslog-8.12.0-gnutls.patch, same
* Wed Aug 26 2015 astieger@suse.com
- rsyslog 8.12.0:
* Harmonize resetConfigVariables values and defaults
* GT/KSI: fix some issues in signature file format and add conversion tool
* bugfix: ommysql did not work when gnutls was enabled
* bugfix omfile: potential memory leak on file close
* bugfix omfile: potential race in dynafile detection/creation
* bugfix omfile: Fix race-condition detection in path-creation code
* bugfix parser subsystem: potential misadressing in SanitizeMsg()
* imfile: files moved outside of directory are now (properly) handled
* bugfix: imfile: segfault when using startmsg.regex
* bugfix imfile: file table was corrupted when on file deletion
* bugfix ompgsql: transaction were improperly handled
* bugfix mmjsonparse: memory leak if non-cee-json message is processed
* testbench: remove raciness from UDP based tests
* testbench: added bash into all scripts makign it mandatory
* bugfix testbench: Fixed problem building syslog_caller util when
liblogging-stdlog is not available.
- add upstream patches:
* rsyslog-8.12.0-gnutls.patch to fix build with gnutls
* rsyslog-8.12.0-parallel-build.patch to fix parallel build
* Wed Jul 01 2015 astieger@suse.com
- rsyslog 8.11.0
- new features:
* signature provider for Keyless Signature Infrastructure (KSI)
- bug fixes:
* imfile: regex multiline mode ignored escapeLF option
* omkafka: fixed several concurrency issues, most of them related
to dynamic topics.
* execonlywhenpreviousissuspended did not work correctly
* core engine: ensured global variable atomicity
* imfile: segfault when using startmsg.regex because of empty log
line
* Tue May 19 2015 astieger@suse.com
- rsyslog 8.10.0:
* imfile: add capability to process multi-line messages based on regex
* pmrfc3164: add new parameter "detect.yearAfterTimestamp"
* pmrfc3164: add new parameter "permit.squareBracesInHostname"
* supplementary groups are now set when dropping privileges
* imfile: added brace glob expansion to wildcard
* zmq: add the ability for zeromq input and outputs to advertise their
presence on UDP via the zbeacon API.
* added omhttpfs: contributed module for writing to HDFS via HTTP
* bug fixes
- packaging changes:
* build with GnuTLS support again as 3.4.0 is now supported
* Thu Apr 30 2015 jengelh@inai.de
- Documentation does not depend on the presence of anything
* Mon Apr 27 2015 jsegitz@novell.com
- Adjusted apparmor profile based on the suggestions by Christian Boltz
* Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls
* Moved profiles to /usr/share/apparmor/extra-profiles/
* Blocked capability block_suspend
plus some other small fixes
* Mon Apr 20 2015 jsegitz@novell.com
- Adjusted apparmor profile to prevent aa-genprof failures
(bnc#925512)
* Mon Apr 13 2015 astieger@suse.com
- disable GnuTLS support, does not build with GnuTLS 3.4.0
* Tue Apr 07 2015 astieger@suse.com
- rsyslog 8.9.0:
- omprog: add option "hup.forward" to forwards HUP to external
plugins
- imuxsock: added capability to use regular parser chain
- new sysSock.useSpecialParser module parameter
- new sysSock.parseHostname module parameter
- new useSpecialParser input parameter
- new parseHostname input parameter
- 0mq: improvements in input and output modules
- imtcp: add support for ip based bind for imtcp -> param "address"
- bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData
- bugfix imfile: partial data loss, especially in readMode != 0
- bugfix: potential large memory consumption with failed actions
- bugfix: omudpspoof: invalid default send template in RainerScript format
- bugfix: size-based legacy config statements did not work properly
on some platforms, they were incorrectly handled, resulting in all
sorts of "interesting" effects (up to segfault on startup)
- build system: added option --without-valgrind-testbench
... which provides the capability to either enforce or turn off
valgrind use inside the testbench. Thanks to whissi for the patch.
- rsyslogd: fix misleading typos in error messa
- remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch
* Sun Mar 01 2015 astieger@suse.com
- rsyslog 8.8.0:
- omkafka: add support for dynamic topics and auto partitioning
- imtcp/imptcp: support for broken Cisco ASA TCP syslog framing
- omfwd: more detailled error messages in case of UDP send error
- TLS syslog: enable capability to turn on GnuTLS debug logging
- bugfix: $AbortOnUncleanConfig did not work
- improve rsyslogd -v output and error message with meta information
- bugfix imtcp: octet-counted framing cannot be turned off
- bugfix: build problems on Illuminos
- bugfix: invalid data size for iMaxLine global property
- bugfix: negative values for maxMessageSize global parameter were permitted
- add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch
to fix compiler warnings/errors
* Fri Feb 13 2015 astieger@suse.com
- rsyslog 8.7.0:
- add message metadata "system" to msg object
this permits to store metadata alongside the message
- imfile: add support for "filename" metadata
this is useful in cases where wildcards are used
- imptcp: make stats counter names consistent with what imudp, imtcp uses
- added new module "omkafka" to support writing to Apache Kafka
- omfwd: add new "udp.senddelay" parameter
- mmnormalize enhancements
- RainerScript "foreach" iterator and array reading support
Thanks to Janmejay Singh for the patch.
- now requires liblognorm >= 1.0.2
- add support for systemd >= 209 library names
- BSD "ntp" facility (value 12) is now also supported in filter
Note: this patch was released under ASL 2.0 (see email-conversation).
- bugfix: global(localHostName="xxx") was not respected in all modules
- bugfix: emit correct error message on config-file-not-found
- bugfix: impstats emitted invalid JSON format (if JSON was selected)
- bugfix: (small) memory leak in omfile's outchannel code
- bugfix: imuxsock did not deactivate some code not supported by platform
- includes changes from 8.6.0:
- configuration-setting rsyslogd command line options deprecated
- new and enhanced plugins for 0mq. These are currently experimantal.
- empty rulesets have been permitted. They no longer raise a syntax error.
- add parameter -N3 to enable config check of partial config file
Use for config include files. Disables checking if any action exists at
all.
- rsyslogd -e option has finally been removed
It is deprectated since many years.
- testbench improvements
- testbench is now by default disabled
- add new RainerScript functions warp() and replace()
- mmnormalize can now also work on a variable
- new property date options for day ordinal and week number
- remove --enable-zlib configure option, we always require it
- slight source-tree restructuring: contributed modules are now in their
own ./contrib directory. The idea is to make it clearer to the end user
which plugins are supported by the rsyslog project (those in ./plugins).
- bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used
- bugfix: not all files closed on auto-backgrounding startup
- bugfix: typo in queue configuration parameter
- bugfix: unitialized buffer off-by-one error in hostname generation
- bugfix imuxsock: possible segfault when SysSock.Use="off"
- bugfix: RainerScript: invalid ruleset names were accepted
- bugfix: some module entry points were not called for all modules
- bugfix omlibdbi: connection was taken down in wrong thread
- imttcp was removed because it was an incompleted experimental module
- pmrfc3164sd because it was a custom module nobody used
- omoracle was removed because it was orphaned and did not build/work
for quite some years and nobody was interested in fixing it
- includes changes from 8.5.0:
- imfile greatly refactored and support for wildcards added
- PRI-handling code refactored for more clarity and robustness
- ommail: add support for RainerScript config system [action() object]
- refactored the auto-backgrounding method
- make gntls tcp syslog driver emit more error messages
- bugfix: imfile did not complain if configured file did not exist
- bugfix: build failure on systems which don't have json_tokener_errors
- imgssapi: log remote peer address in some error messages
- includes changes from 8.4.3:
- ommail: minor bugfixes & improvements
- bugfix imkmsg: infinite loop on OpenVZ VMs
- bugfix: typo in queue configuration parameter made parameter unusable
- bugfix: unitialized buffer off-by-one error in hostname generation
- bugfix imfile: segfault on startup in "inotify" mode
- bugfix imfile: could make rsyslog exit in inotify mode
- bugfix: rsgtutil sometimes crashed in verify mode if file did not exist
- bugfix imklog: pri was miscalculated
- bugfix: imjournal did not build properly
- bugfix: mmcount did no longer build
- bugfix imuxsock: possible segfault when SysSock.Use="off"
- rsyslog Version 8.5.0 fixed bsc#992146
* Thu Dec 04 2014 andreas.stieger@gmx.de
- set file permissions only on first install [boo#899316]
* Wed Oct 22 2014 heinemannj66@gmail.com
- Changed BuildRequires dependencies for SLES11SP3
- BuildRequires: libjson-c-devel
- BuildRequires: libestr-devel
- BuildRequires: liblogging-devel
- BuildRequires: librelp-devel
- BuildRequires: libee-devel
- BuildRequires: liblognorm-devel
- BuildRequires: libuuid-devel
* Sat Oct 18 2014 ledest@gmail.com
- fix shebang of rsyslog-service-prepare script
* Sat Oct 04 2014 andreas.stieger@gmx.de
- rsyslog Version 8.4.2 [v8-stable] 2014-10-02 [bnc#899756]
This release primarily contains a correction for the previous fix
for the PRI vulnerability which was incomplete.
- bugfix: the fix for CVE-2014-3634 did not handle all cases
This is corrected now. see also: CVE-2014-3683
- fixed a build problem on some platforms
- behaviour change: "msg" of messages with invalid PRI set to
"rawmsg"
* Wed Oct 01 2014 mt@suse.de
- Removed broken zpipe utility from diag-tools package (bnc#890228)
* Tue Sep 30 2014 mt@suse.de
- update to rsyslog 8.4.1 [v8-stable] 2014-09-30 (bnc#897262)
- imudp: add for bracketing mode, which makes parsing stats easier
- permit at-sign in variable names
closes: https://github.com/rsyslog/rsyslog/issues/110
- bugfix: fix syntax error in anon_cc_numbers.py script
Thanks to github user anthcourtney for the patch.
closes: https://github.com/rsyslog/rsyslog/issues/109
- bugfix: ompgsql: don't loose uncomitted data on retry
Thanks to Jared Johnson and Axel Rau for the patch.
- bugfix: imfile: if a state file for a different file name was set,
that different file (name) was monitored instead of the configured
one. Now, the state file is deleted and the correct file monitored.
closes: https://github.com/rsyslog/rsyslog/issues/103
- bugfix: omudpspoof: source port was invalid
Thanks to Pavel Levshin for the patch
- bugfix: build failure on systems which don't have json_tokener_errors
Older versions of json-c need to use a different API (which don't exists
on newer versions, unfortunately...)
Thanks to Thomas D. for reporting this problem.
- bugfix: omelasticsearch does not work with broken/changed ES 1.0+ API
closes: https://github.com/rsyslog/rsyslog/issues/104
- bugfix: mmanon did not properly anonymize IP addresses starting with '9'
Thanks to defa-at-so36.net for reporting this problem.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=529
- bugfix: build problems on SuSe Linux
Thanks Andreas Stieger for the patch
- bugfix: omelasticsearch error file did not work correctly on ES 1.0+
due to a breaking change in the ElasticSearch API.
see also: https://github.com/rsyslog/rsyslog/issues/104
- bugfix: potential abort when a message with PRI > 191 was processed
if the "pri-text" property was used in active templates, this could
be abused to a remote denial of service from permitted senders
see also: CVE-2014-3634
- removed patches obsoleted by this version:
[- rsyslog-8.4.0_implicit_declaration.patch,
- rsyslog-8.4.0-json-c-0.12-configure.patch,
- rsyslog-8.4.0-json-c-0.12.patch]
- adopted patch for modified rsyslog.service:
[* rsyslog-unit.patch]
* Mon Sep 22 2014 andreas.stieger@gmx.de
- fix build with json-c 0.12 with upstream patch
rsyslog-8.4.0-json-c-0.12.patch
- json-c provides a compatibility pkg-config for "json". Add
rsyslog-8.4.0-json-c-0.12-configure.patch to check for the
required function directly.
* Wed Sep 17 2014 wagner-thomas@gmx.at
- added firewall template file
* Fri Aug 22 2014 mt@suse.de
- Stop syslog.socket in %preun to avoid the daemon we uninstall
gets started by a log message due to dependencies (bnc#840815).
* Thu Aug 21 2014 mrueckert@suse.de
- reenable gssapi module
* Thu Aug 21 2014 mrueckert@suse.de
- rsyslog 8.4.0 [v8-stable]
- this is the new stable branch, which incorporates all
enhancements of rsyslog 8.3.
- rsyslog 8.3.5 [v8-devel] 2014-08-05
- mmjsonparse: support selectable cookie and target containers
This permits to put different meanings into a json formatted
syslog message, e.g. the "traditional" cee or cim data.
- bugfix: mmjsonparse did not build with json-c < 0.10 This was a
regression introduced some time in the past in order to support
API changes in json-c. Now we check for the - rsyslog and use
proper code.
- omprog: emit error message via syslog() if loading binary fails
This happens after forking, so omprog has no longer access to
rsyslog's regular error reporting functions. Previously, this
meant any error message was lost. Now it is emitted via regular
syslog (which may end up in a different instance, if multiple
instances run...)
- couple of patches imported from v7-stable (7.6.4)
- rsyslog 8.3.4 [v8-devel] 2014-07-11
- new pmciscoios parser supporting various Cisco IOS formats
- RFC3164 timestamp parser now accepts timezones and subsecond
resolution ... at least for some common formats and where we
could do so without running risk of breaking proper formats (or
introducing regressions)
- new parser config object -- permits to define custom parser
definitions
- new tzinfo config object -- permits to define time zone offsets
This is a utility object that currently is being used by some
parsers.
- bugfix: mishandling of input modules not supporting new input
instances If they did not support this, accidently the output
module part of the module union was written, leading to
unpredictable results. Note: all core modules do support this
interface, but some contributed or very old ones do not.
- bugfix: double-free when ruleset() parser parameters were used
While unlikely, this could cause stability issues even after
the config phase.
- rsyslog 8.3.3 [v8-devel] 2014-06-26
- unify input object naming imudp now supports "name" paramter,
as other inputs do. "inputname" has been deprecated, but can
still be used. Same applies to "appendport" subparamter".
Thanks to "Nick Syslog" for the suggestion.
- made the missing (contributed) modules build under v8 [import
from 8.2.2] Modules:
* mmrfc5424addhmac omrabbitmq omgssapi omhdfs omzmq3
- added a cleanup process (janitor); permits to close omfile
files after a timeout
- make omgssapi build under v8.3 [import vom v8.2] note that we
could do this to the stable, because there is NO regression
chance at all: only omgssapi was changed, and this module did
NOT work previously.
- removed obsolete --disable-fsstnd configure option Thanks to
Thomas D. for alerting us. Closes:
https://github.com/rsyslog/rsyslog/issues/72
- rsyslog 8.3.2 [v8-devel] 2014-05-02
- new template options for date extraction:
- year
- month
- day
- wday
- hour
- minute
- second
- tzoffshour
- tzoffsmin
- tzoffsdirection
- wdayname For string templates, these are property options and
they are prefixed with "date-" (e.g. "date-year",
"date-month", ...) see also:
https://github.com/rsyslog/rsyslog/issues/65
- bugfix: mmexternal remove framing char before processing JSON
reply This did not have any real bad effects, but caused
unnecessary processing, as empty replies were not properly
detected. Otherwise, the bug was not noticible from the user's
PoV.
- bugfix: mmexternal segfault due to invalid free in non-json
input mode closes: https://github.com/rsyslog/rsyslog/issues/70
- bugfix: mmexternal segfault when external plugin sent invalid
reply ... or no reply at all. This happened if the reply was
imporper JSON. Now, we emit an error message in those cases.
see also: https://github.com/rsyslog/rsyslog/issues/69
- bugfix: mmexternal did potentially pass incomplete data to
restarted external plugin This could happen if EPIPE was
returned "too late", in which case the beginning of the data
could be lost.
- bugfix: mmexternal did not properly process messages over 4KiB
The data to be passed to the external plugin was truncated
after 4KiB. see: https://github.com/rsyslog/rsyslog/issues/64
- imrelp: added support for per-listener ruleset and inputname
see: https://github.com/rsyslog/rsyslog/pull/63 Thanks to
bobthesecurityguy github user for the patch
- rsyslog 8.3.1 [v8-devel] 2014-04-24
- external message modification interface now support modifying
message PRI
- "jsonmesg" property will include uuid only if one was
previously generated This is primarily a performance
optimization. Whenever the message uuid is gotten, it is
generated when not already present. As we used the regular
setter, this means that always the uuid was generated, which is
quite time-consuming. This has now been changed so that it only
is generated if it already exists. That also matches more
closly the semantics, as "jsonmesg" should not make
modifications to the message. Note that the same applies to
"fulljson" passing mode for external plugins.
- added plugin to rewrite message facility and/or severity Name:
fac-sever-rewrite.py
- permits to build against json-c 0.12 Unfortunately, json-c had
an ABI breakage, so this is necessary. Note that - rsyslogs
prior to 0.12 had security issues (CVE-2013-6370,
CVE-2013-6371) and so it is desirable to link against the new -
rsyslog. Thanks to Thomas D. for the patch. Note that at least
some distros have fixed the security issue in older - rsyslogs
of json-c, so this seems to apply mostly when building from
sources.
- bugfix: using UUID property could cause segfault
- bugfix/mmexternal: memory leak
- bugfix: memory leak when using "jsonmesg" property
- bugfix: mmutf8fix did not detect two invalid sequences Thanks
to Axel Rau for the patch.
- bugfix: build problems with lexer.l on some platforms For some
reason, the strdup() prototype and others are missing. I admit
that I don't know why, as this happens only in 8.3.0+ and there
is no indication of changes to the affected files. In any case,
we need to fix this, and the current solution works at least as
an interim one.
- rsyslog 8.3.0 [v8-devel] 2014-04-10
- new plugin for anonymizing credit card numbers Thanks to Peter
Slavov for providing the code.
- external message modification modules are now supported They
are bound via the new native module "mmexternal". Also, a
sample skeleton for an external python message modification
module has been added.
- new $jsonmesg property with JSON representation of whole
message object closes:
https://github.com/rsyslog/rsyslog/issues/19
- improved error message for invalid field extraction in string
template see also:
http://kb.monitorware.com/problem-with-field-based-extraction-t12299.html
- fix build problems on Solaris
- NOTE: a json-c API that we begun to use requires the compiler
to be in c99 mode. By default, we select it automatically. If
you modify this and use gcc, be sure to include "-std=c99" in
your compiler flags. This seems to be necessary only for older
- rsyslogs of gcc.
- rsyslog 8.2.3 [v8-stable] 2014-??-??
- bugfix: ommysql: handle/mem leak upon termination of worker
thread This could become bad if the (instance) worker threads
are often started and terminated. But it takes quite a while to
show effect.
- added documentation tarball and also install the html
documentation
new subpackage rsyslog-doc
- drop rsyslog-pid-file.patch: patch is included in update
- added rsyslog-8.4.0_implicit_declaration.patch:
include sys/time.h for gettimeofday
* Wed Jul 16 2014 jsegitz@suse.com
- Preliminary AppArmor support. Since those profiles need to be tested
properly they'll live in /etc/apparmor/profiles/extras.
- Added rsyslog-pid-file.patch to fix a regression that causes the pid
file to be created in /etc
* Wed Jun 04 2014 andreas.stieger@gmx.de
- rsyslog 8.2.2 [v8-stable]
* made contributed modules build under v8
- add mmrfc5424addhmac, was removed in upgrade to v8-stable series
- fix warning about missing symlink
/usr/sbin/rcrsyslog -> /usr/sbin/service
* Mon May 19 2014 mt@suse.com
- rpm: use _rundir rpm macro if defined (bnc#873857)
* Sat May 17 2014 heinemannj66@gmail.com
- adjust default configuration to address warning:
"rsyslogd-2307: warning: ~ action is deprecated, consider using
the 'stop' statement instead"
* Wed May 14 2014 heinemannj66@gmail.com
- rsyslog 8.2.1 [v8-stable]
* permits to build against json-c 0.12
Unfortunately, json-c had an ABI breakage, so this is necessary. Note
that versions prior to 0.12 had security issues (CVE-2013-6370,
CVE-2013-6371) and so it is desirable to link against the new version.
Thanks to Thomas D. for the patch. Note that at least some distros
have fixed the security issue in older versions of json-c, so this
seems to apply mostly when building from sources.
* doc is no longer shipped as part of the rsyslog tarball
Instead, the rsyslog-doc project creates its own tarball. This is the
result of a mailing list discussion after the 8.2.0 release with a
tarball-in-tarball approach, which was disliked by almost all distro
maintainers. This move also has the advantage of de-coupling the
release cycles of both projects a bit (which turned out to be a bit
problematic in practice).
* bugfix: mmutf8fix did not detect two invalid sequences
* Wed May 14 2014 heinemannj66@gmail.com
- rsyslog 8.2.0 [v8-stable]
This starts a new stable branch based on 8.1.6 plus the following changes:
* we now use doc from the rsyslog-doc project
As such, the ./doc subtree has been removed. Instead, a cache of the
rsyslog-doc project's files has been included in ./rsyslog-doc.tar.gz.
Note that the exact distribution mode for the doc is still under
discussion and may change in future releases.
This was agreed upon on the rsyslog mailing list. For doc issues
and corrections, be sure to work with the rsyslog-doc project. It is
currently hosted at https://github.com/rsyslog/rsyslog-doc
* add support for specifying the liblogging-stdlog channel spec
new global parameter "stdlog.channelspec"
* add "defaultnetstreamdrivercertfile" global variable to set a default
for the certfile.
* omelasticsearch: add new "usehttps" parameter for secured connections
* "action resumed" message now also specifies module type
which makes troubleshooting a bit easier. Note that we cannot output all
the config details (like destination etc) as this would require much more
elaborate code changes, which we at least do not like to do in the
stable version.
* add capability to override GnuTLS path in build process
* better and more consistent action naming, action queues now always
contain the word "queue" after the action name
* bugfix: ompipe did resume itself even when it was still in error
* Wed May 14 2014 heinemannj66@gmail.com
- rsyslog 7.6.4 [v7-stable]
* removed obsolete --disable-fsstnd configure option
* permits to build against json-c 0.12
* new omfile default module parameters:
filecreatemode
fileowner
fileownernum
filegroup
filegroupnum
dirowner
dirownernum
dirgroup
dirgroupnum
* bugfix: using UUID property could cause segfault
* bugfix: mmutf8fix did not detect two invalid sequences
* Thu Mar 27 2014 andreas.stieger@gmx.de
- rsyslog 7.6.3 [v7-stable]
* add capability to override GnuTLS path in build process
* support (and require) librelp 1.2.5
* bugfix: ompipe used invalid default template
* bugfix: ompipe did emit many suspension messages for /dev/xconsole
* Thu Mar 20 2014 andreas.stieger@gmx.de
- rsyslog 7.6.2 [v7.6-stable]
major updates of the 7.6 series:
* imrelp/omrelp now support TLS & (zip) compression
* impstats is now emitting resource usage counters, can directly
emit delta values and can now be bound to a ruleset
* mmpstrucdata is a new module to parse RFC5424 structured data
into JSON message properties
* mmutf8fix is a new module to fix invalid UTF-8 sequences
* mmsequence is a new module that helps with action load balancing
* new defaults for main/ruleset queues to be more enterprise-like
- For specific version changelogs, see
* http://www.rsyslog.com/changelog-for-7-6-0-v7-stable/
* http://www.rsyslog.com/changelog-for-7-6-1-v7-stable/
* http://www.rsyslog.com/changelog-for-7-6-2-v7-stable/
- packaging changes:
* drop rsyslog-7.4.6-omelasticsearch-atomic-instructions-ppc.patch
committed upstream
* build with rfc3195 support
* Thu Mar 20 2014 andreas.stieger@gmx.de
- rsyslog 7.4.10:
- bugfix: json templates are improperly created
- ompgsql bugfix: improper handling of auto-backgrounding mode
- contains changes from 7.4.9:
- added ProcessInternalMessages global system parameter
- bugfix: imuxsock input parameters were not accepted
- bugfix: potential double-free in RainerScript equal comparison
- bugfix: some RainerScript Json(Variable)/string comparisons were wrong
* Tue Feb 11 2014 andreas.stieger@gmx.de
- use liblognorm0 transitional package in Factory to fix build
until rsyslog is updated to support liblognorm >= 1.0.0
* Fri Jan 24 2014 mt@suse.de
- Added Restart=on-abort to rsyslog.service (fate#315133)
* Wed Jan 08 2014 andreas.stieger@gmx.de
- update to 7.4.8 [v7.4-stable]
- rsgtutil provides better error messages on unfinished signature
blocks
- bugfix: guard against control characters in internal (error)
messages
- bugfix: immark did emit messages under kern.=info instead of
syslog.=info Note that his can potentially break exisiting
configurations that rely on immark sending as kern.=info.
* Wed Dec 11 2013 andreas.stieger@gmx.de
- update to 7.4.7 [v7.4-stable] [bnc#855058]
- bugfix: limiting queue disk space did not work properly
- bugfix: linux kernel-like ratelimiter did not work properly with all
inputs (for example, it did not work with imdup).
- bugfix: disk queues created files in wrong working directory
- bugfix: legacy directive $ActionQueueWorkerThreads was not honored
- bugfix: segfault on startup when certain script constructs are used
e.g. "if not $msg ..."
- bugfix: imuxsock: UseSysTimeStamp config parameter did not work correctly
- bugfix: $SystemLogUseSysTimeStamp/$SystemLogUsePIDFromSystem did not work
- improved checking of queue config parameters on startup
- bugfix: call to ruleset with async queue did not use the queue
- bugfix: if imtcp is loaded and no listeners are configured (which is
uncommon), rsyslog crashes during shutdown.
* Wed Nov 06 2013 mt@suse.de
- Fixed to avoid rebuild rscryutil.1 rsgtutil.1 on SLE-11.
* Mon Nov 04 2013 andreas.stieger@gmx.de
- fix ppc build, add patch from upstream to fix build on platforms
without atomic instructions
rsyslog-7.4.6-omelasticsearch-atomic-instructions-ppc.patch
* Thu Oct 31 2013 andreas.stieger@gmx.de
- update to 7.4.6 [v7.4-stable] [bnc#848574]
- bugfix: potential abort during HUP
- bugfix: imtcp flowControl parameter incorrectly defaulted to "off"
- now requires libestr 0.1.9 for number handling in RainerScript
- bugfix: memory leak in strlen() RainerScript function
- bugfix: buffer overrun if re_extract function was called for submatch 50
- bugfix: memleak in re_extract() function
- bugfix: potential abort in RainerScript optimizer
- bugfix: memory leak in omhiredis
- bugfix: segfault if variable was assigned to non-container subtree
* Mon Oct 28 2013 andreas.stieger@gmx.de
- update to 7.4.5 [v7.4-stable]
- mmanon: removed the check for specific "terminator characters"
- now requires libestr 0.1.8
- omelasticsearch: add failed.httprequests stats counter
- bugfix: invalid property filter was not properly disabled in ruleset
- bugfix: segfault if re_extract() function was used and no match found
- bugfix: potential misadressing on startup if property-filter was used
- bugfix: omelasticsearch: correct failed.http stats counter
- bugfix: omelasticsearch: did not correctly initialize stats counters
- bugfix: omelasticsearch: failed.es counter was only maintained in bulk mode
- bugfix: mmanon did not detect all IP addresses in rewrite mode
- bugfix: mmanon sometimes used invalid replacement char in simple mode
- bugfix: memory leak in mmnormalize
- bugfix: array-based ==/!= comparisions lead to invalid results
- bugfix: omprog blocked signals to executed programs
- bugfix: doc: imuxsock legacy param $SystemLogSocketParseTrusted was
misspelled
- bugfix: imfile "facility" input parameter improperly handled
- bugfix: small memory leak in imfile when $ResetConfigVariables was used
- bugfix: segfault on startup if TLS was used but no CA cert set
- bugfix: segfault on startup if TCP TLS was used but no cert or key set
- bugfix: some more build problems with newer json-c versions
- bugfix: build system: libgcrypt.h needed even if libgrcypt was disabled
* Thu Sep 12 2013 andreas.stieger@gmx.de
- update to 7.4.4 [v7.4-stable]
- better error messages in GuardTime signature provider
- make rsyslog use the new json-c pkgconfig file if available
- bugfix: imfile parameter "persistStateInterval" was unusable
due to a case typo in imfile; work-around was to use legacy config
- bugfix: TLV16 flag encoding error in signature files from GT provider
This fixes a problem where the TLV16 flag was improperly encoded.
Unfortunately, existing files already have the bug and may not properly
be processed. The fix uses constants from the GuardTime API lib to
prevent such problems in the future.
- bugfix: slightly malformed SMTP handling in ommail
- bugfix: segfault in omprog if no template was provided (now dflt is used)
- bugfix: segfault in ompipe if no template was provided (now dflt is used)
- bugfix: segfault in omsnmp if no template was provided (now dflt is used)
- bugfix: some omsnmp optional config params were flagged as mandatory
- bugfix: segfault in omelasticsearch when resuming queued messages
after restarting Elasticsearch
- bugfix: imtcp addtlframedelimiter could not be set to zero
- doc bugfix: remove no-longer existing omtemplate from developer doc
was specifically mentioned as a sample for creating new plugins
* Sat Jul 20 2013 andreas.stieger@gmx.de
- update to 7.4.3 [v7.4-stable]
- bugfix: memory leak if disk queues were used and json data
rresent
- bugfix: CEE/json data was lost during disk queue operation
- bugfix: potential segfault during startup on invalid config
- bugfix: 100% CPU utilization when DA queue became full
- bugfix: omlibdbi did not properly close connection on some
errors
- cosmetic bugfix: file name buffer was not freed on disk queue
destruction
* Fri Jul 05 2013 mt@suse.de
- Update to 7.4.2 [v7.4-stable] (bnc#828140,CVE-2013-4758):
- bugfix: in RFC5425 TLS, multiple wildcards in auth could cause
segfault
- bugfix: RainerScript object required parameters were not properly
checked - this clould result to segfaults on startup if parameters
were missing.
- bugfix: double-free in omelasticsearch
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=461
a security advisory for this bug is available at:
http://www.lsexperts.de/advisories/lse-2013-07-03.txt
PLEASE NOTE: This issue only existed if omelasticsearch was used
in a non-default configuration, where the "errorfile" parameter
was specified. Without that parameter set, the bug could not be
triggered. Thanks to Markus Vervier and Marius Ionescu for providing
a detailled bug report. Special thanks to Markus for coordinating
his security advisory with us.
- bugfix: omrelp potential segfault at startup on invalid config
parameters
- bugfix: small memory leak when $uptime property was used
- bugfix: potential segfault on rsyslog termination in imudp
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=456
- bugfix: lmsig_gt abort on invalid configuration parameters
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=448
Thanks to Risto Laanoja for the patch.
- imtcp: fix typo in "listner" parameter, which is "listener"
Currently, both names are accepted.
- solved build problems on FreeBSD
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=457
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=458
Thanks to Christiano for reproting and suggesting patches
- solved build problems on CENTOS5
* Wed Jun 26 2013 mt@suse.de
- Use --enable-cached-man-pages configure option on SLES-11, where
rst2man is not available and removed prebuilt man pages.
* Sat Jun 22 2013 andreas.stieger@gmx.de
- update to 7.4.1 [v7.4-stable]:
- imjournal: add ratelimiting capability
- bugfix imzmq3: potential segfault on startup
- includes changes from 7.4.0 [v7.4-stable]:
- doc bugfix: ReadMode wrong in imfile doc, two values were swapped
- imjournal: no longer do periodic wakeup
- bugfix: potential hang *in debug mode* on rsyslogd termination
- bugfix: $template statement with multiple spaces lead to invalid tpl name
- 0mq fixes
- includes changes from version 7.3.15
- bugfix: problem in build system (especially when cross-compiling)
- bugfix: imjournal had problem with systemd journal API change
- imjournal: now obtain and include PID
- bugfix: .logsig files had tlv16 indicator bit at wrong offset
- bugfix: omrelp legacy config parameters set a timeout of zero
which lead the legacy config to be unusable.
- bugfix: segfault on startup if a disk queue was configure without file
name
- bugfix: invalid addressing in string class (recent regression)
- packaging changes:
- rebase rsyslog-unit.patch
- move libee/liblognorm dependencies to mmnormalize conditional
* Fri Jun 14 2013 crrodriguez@opensuse.org
- Required version of pkgconfig(relp) is >= 1.0.3
- Requires version of libsystemd-journal is >= 197
- Notify systemd on sucessful startup of the daemon to avoid
confusing behaviour such as :
http://lists.opensuse.org/opensuse/2013-06/msg00603.html
* Mon May 13 2013 mt@suse.de
- Fixed SLES-11 build that does not have rst2man/python-docutils;
added pre-built rscryutil.1 and rsgtutil.1 as sources because
v7.3.14 does not ship them pre-built any more.
* Tue May 07 2013 mt@suse.de
- update to 7.3.14 [beta] 2013-05-06:
- bugfix: some man pages were not properly installed either
rscryutil or rsgtutil man was installed, but not both.
Thanks to Marius Tomaschewski for the patch.
- bugfix: potential segfault on startup when builtin module was
specified in module() statement.
Thanks to Marius Tomaschewski for reporting the bug.
- bugfix: segfault due to invalid dynafile cache handling
Accidently, the old-style cache size parameter was used when the
dynafile cache was created in a RainerScript action. If the
old-style size was lower than the one actually set, this lead to
misadressing when the size was overrun, and that could lead to
all kinds of “interesting things”, often in segfaults.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=440
* Tue Apr 30 2013 mt@suse.de
- Adopted config file to stop instead of deprecated "~" action.
* Tue Apr 30 2013 mt@suse.de
- Enabled log file signing module lmsig_gt using GuardTime as
separate rsyslog-module-guardtime package.
- Moved previously enabled log file encryption module lmcry_gcry
and its utility into a separate rsyslog-module-gcrypt package.
* Tue Apr 30 2013 mt@suse.de
- update to 7.3.13 [beta] 2013-04-29:
- added omrabbitmq module (contributed, untested)
Note: this is unsupported and as such was moved immediately
into the beta version.
Thanks to Vaclav Tomec for providing this module.
- bugfix: build problem when –enable-encryption was not selected
Thanks to Michael Biebl for fixing this.
- doc bugfix: omfile parameter “VeryRobustZip” was documentas as
“VeryReliableZip”
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=437
Thanks to Thomas Doll for reporting this.
- update to 7.3.12 [devel] 2013-04-25:
- added doc for omelasticsearch
Thanks to Radu Gheorghe for the doc contribution.
- omelasticsearch: _id field support for bulk operations
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=392
Thanks to Jérôme Renard for the idea and patches.
- max number of templates for plugin use has been increased to five
- platform compatibility enhancement: solve compile issue with
libgcrypt do not use GCRY_CIPHER_MODE_AESWRAP where not available
fix compile on Solaris
Thanks to Martin Carpenter for the patch.
- bugfix: off-by-one error in handling local FQDN name (regression)
A remporary buffer was allocated one byte too small. Did only
affect startup, not actual operations. Came up during routine tests,
and can have no effect once the engine runs. Introduced in 7.3.11.
- bugfix: build problems on Solaris
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=436
- bugfix: block size limit was not properly honored
- bugfix: potential segfault in guardtime signature provider
it could segfault if an error was reported by the GuardTime API,
because an invalid free could happen then
- update to 7.3.11 [devel] 2013-04-23
- added support for encrypting log files (lmcry_gcry plugin)
- omhiredis: added support for redis pipeline support
Thanks to Brian Knox for the patch.
- bugfix: $PreserveFQDN is not properly working
Thanks to Louis Bouchard for the patch
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=426
- bugfix: imuxsock aborted due to problem in ratelimiting code
Thanks to Tomas Heinrich for the patch.
- bugfix: imuxsock aborted under some conditions regression from
ratelimiting enhancements – this was a different one to the one
Tomas Heinrich patched.
- bugfix: timestamp problems in imkmsg
- Enabled systemd imjournal,omjournal modules on > 12.3.
- Enabled mmanon, providing anonymization support
- Enabled lmcry_gcry.so, providing log file encryption support
and the rscryutil utility to manage the encrypted log files.
- Removed obsolete --enable-pthreads configure option.
* Fri Apr 19 2013 andreas.stieger@gmx.de
- rsyslogd.conf removed from upstream tarball, no longer install as
documentation.
- build requirement for libestr is >= 0.1.5
* Fri Apr 19 2013 mt@suse.de
- update to 7.2.7 [v7-stable] 2013-04-17:
- rsyslogd startup information is now properly conveyed back to init
when privileges are beging dropped. Actually, we have moved
termination of the parent in front of the priv drop. So it shall
work now in all cases. See code comments in commit for more details.
- If forking, the parent now waits for a maximum of 60 seconds for
termination by the child
- improved debugging support in forked (auto-backgrounding) mode.
The rsyslog debug log file is now continued to be written across the
fork.
- updated systemd files to match current systemd source
- bugfix: failover/action suspend did not work correctly
This was experienced if the retry action took more than one second
to complete. For suspending, a cached timestamp was used, and if the
retry took longer, that timestamp was already in the past. As a
result, the action never was kept in suspended state, and as such no
failover happened. The suspend functionalit now does no longer use
the cached timestamp (should not have any performance implication,
as action suspend occurs very infrequently).
- bugfix: nested if/prifilt conditions did not work properly
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=415
- bugfix: script == comparison did not work properly on JSON objects
[backport from 7.3 branch]
- bugfix: imudp scheduling parameters did affect main thread, not imudp
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=409
- bugfix: imuxsock rate-limiting could not be configured via legacy conf
Rate-limiting for the system socket could not be configured via legacy
configuration directives. However, the new-style RainerScript config
options worked.
Thanks to Milan Bartos for the patch.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=390
- bugfix: using group resolution could lead to endless loop
Thanks to Tomas Heinrich for the patch.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=310
- bugfix: $mmnormalizeuseramsg paramter was specified with wrong type
Thank to Renzhong Zhang for alerting us of the problem.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=420
- bugfix: RainerScript getenv() function caused segfault when var was
not found.
Thanks to Philippe Muller for the patch.
- bugfix: several issues in imkmsg
see bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=421#c8
- bugfix: imuxsock was missing SysSock.ParseTrusted module parameter
To use that functionality, legacy rsyslog.conf syntax had to be used.
Also, the doc was missing information on the "ParseTrusted" set of
config directives.
- bugfix: parameter action.execOnlyWhenPreviousIsSuspended was
accidently of integer-type. For obvious reasons, it needs to be
boolean. Note that this change can break existing configurations
if they circumvented the problem by using 0/1 values.
- doc bugfix: rsyslog.conf man page had invalid file format info
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=418
- update to 7.2.6 [v7-stable] 2013-03-05:
- slightly improved config parser error messages when invalid escapes
happen
- bugfix: include files got included in the wrong order
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=411
This happens if an $IncludeConfig directive was done on multiple
files (e.g. the distro default of $IncludeConfig /etc/rsyslog.d/*.conf).
In that case, the order of include file processing is reversed, which
could lead to all sorts of problems.
Thanks to Nathan Stratton Treadway for his great analysis of the
problem, which made bug fixing really easy.
- bugfix: omelasticsearch failed when authentication data was provided
... at least in most cases it emitted an error message:
"snprintf failed when trying to build auth string"
Thanks to Joerg Heinemann for alerting us.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=404
- bugfix: some property-based filter were incorrectly parsed
This usually lead to a syntax error on startup and rsyslogd not actually
starting up. The problem was the regex, which did not care for double
quote characters to follow in the action part - unfortunately something
that can frequently happen with v6+ format. An example:
:programname, isequal, "as" {action(type="omfile" ...) }
Here, the part
:programname, isequal, "as" {action(type="omfile"
was treated as the property filter, and the rest as action part.
Obviously, this did not work out. Unfortunately, such situations usually
resulted in very hard to understand error messages.
* Tue Apr 16 2013 mt@suse.de
- Fixed service file to pass $RSYSLOGD_PARAMS to rsyslogd again.
* Sun Apr 14 2013 crrodriguez@opensuse.org
- Fix systemd units to do exactly what is documented as
required --> http://www.freedesktop.org/wiki/Software/systemd/syslog
In particular, it must not mess with the ordering of syslog.target
this is done by removing the custom unit and adapting the upstream
one with openSUSE additions (rsyslog-unit.patch)
* Fri Mar 29 2013 vcizek@suse.com
- restore SELinux label when creating xconsole (bnc#812447)
* Tue Feb 19 2013 mt@suse.de
- Fixed rsyslog.service file to support reload (bnc#803994)
* Tue Jan 15 2013 mt@suse.de
- Fixed relp build requires change, which broke SLE-11 build.
* Mon Jan 14 2013 andreas.stieger@gmx.de
- update to 7.2.5 [v7-stable]:
- build system cleanup
- bugfix: omelasticsearch did not properly compile on some platforms
due to missing libmath
- bugfix: on termination, actions were incorrectly called
- bugfix: very large memory consumption (and probably out of memory) when
FromPos was specified in template, but ToPos not.
- bugfix: timeval2syslogTime cause problems on some platforms
due to invalid assumption on structure data types.
- bugfix: compile errors in im3195
- bugfix: doGetFileCreateMode() had invalid validity check
- bugfix: mmjsonparse errornously returned action error when no
CEE cookie was present.
* Wed Jan 09 2013 mt@suse.com
- Enable rsyslog.service and create the syslog.service alias link
in post install -- regardless of a preset config (bnc#790805).
- Check the existence of /etc/init.d/syslog script before calling
the restart_on_update and stop_on_removal macros to avoid errors
on update. Since openSUSE 12.3, no syslog init script is shipped
(bnc#790298,bnc#750478).
* Mon Jan 07 2013 mt@suse.com
- Update to 7.2.4 [v7-stable] with following changes:
- enhance: permit RFC3339 timestamp in local log socket messages
Thanks to Sebastien Ponce for the patch.
- imklog: added ParseKernelTimestamp parameter (import from 5.10.2)
Thanks to Marius Tomaschewski for the patch.
- fix missing functionality: ruleset(){} could not specify ruleset queue
The "queue.xxx" parameter set was not supported, and legacy ruleset
config statements did not work (by intention). The fix introduces the
"queue.xxx" parameter set. It has some regression potential, but only
for the new functionality. Note that using that interface it is possible
to specify duplicate queue file names, which will cause trouble. This
will be solved in v7.3, because there is a too-large regression
potential for the v7.2 stable branch.
- imklog: added KeepKernelTimestamp parameter (import from 5.10.2)
Thanks to Marius Tomaschewski for the patch.
- bugfix: imklog mistakenly took kernel timestamp subseconds as nanoseconds
... actually, they are microseconds. So the fractional part of the
timestamp was not properly formatted. (import from 5.10.2)
Thanks to Marius Tomaschewski for the bug report and the patch idea.
- bugfix: supportoctetcountedframing parameter did not work in imptcp
- bugfix: modules not (yet) supporting new conf format were not properly
registered. This lead to a "module not found" error message instead of
the to-be-expected "module does not support new style" error message.
That invalid error message could be quite misleading and actually stop
people from addressing the real problem (aka "go nuts" ;))
- bugfix: template "type" parameter is mandatory (but was not)
- bugfix: some message properties could be garbled due to race condition
This happened only on very high volume systems, if the same message was
being processed by two different actions. This was a regression caused
by the new config processor, which did no longer properly enable msg
locking in multithreaded cases. The bugfix is actually a refactoring of
the msg locking code - we no longer do unlocked operations, as the use
case for it has mostly gone away. It is potentially possible only at
very low-end systems, and there the small additional overhead of doing
the locking does not really hurt. Instead, the removal of that
capability can actually slightly improve performance in common cases,
as the code path is smaller and requires slightly less memory writes.
That probably outperforms the extra locking overhead (which in the
low-end case always happens in user space, without need for kernel
support as we can always directly aquire the lock - there is no
contention at all).
- Removed imklog-kernel-timestamp-parsing (bnc#783967) patch obsoleted
by this version.
* Fri Nov 23 2012 mrueckert@suse.de
- fix zeromq support
* Fri Nov 23 2012 mrueckert@suse.de
- fix hiredis support
* Thu Nov 22 2012 mrueckert@suse.de
- enabled elastic search support (build enabled by default):
- > new buildrequires curl devel
- > new subpackage rsyslog-module-elasticsearch
- added --enable-unlimited-select
- added --enable-imttcp:
- > this module is packaged in the main package as it has no
new dependencies
- added --enable-imdiag
- > this module is packaged in the diag package
- prepared adding support for hiredis, hdfs, mongodb and zeromq
* Thu Nov 22 2012 mt@suse.com
- Update to 7.2.3 (v7-stable) a release providing following fixes:
- regression fix: rsyslogd terminated when wild-card $IncludeConfig did not
find actual include files. For example, if this directive is present:
$IncludeConfig /etc/rsyslog.d/*.conf
and there are no *.conf files in /etc/rsyslog.d (but rsyslog.d exists),
rsyslogd will emit an error message and terminate. Previous (and expected)
behaviour is that an empty file set is no problem. HOWEVER, if the
directory itself does not exist, this is flagged as an error and will
load to termination (no startup).
Unfortunately, this is often the case by default in many distros, so this
actually prevents rsyslog startup.
- doc improvements
- enabled to build without libuuid, at loss of uuid functionality
this enables smoother builds on older systems that do not support
libuuid. Loss of functionality should usually not matter too much as
uuid support has only recently been added and is very seldom used.
- bugfix: omfwd did not properly support "template" parameter
- bugfix: potential segfault when re_match() function was used
Thanks to oxpa for the patch.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=371
- bugfix: potential abort of imtcp on rsyslogd shutdown
- bugfix: imzmq3 segfault with PULL subscription
Thanks to Martin Nilsson for the patch.
- bugfix: improper handling of backslash in string-type template()s
- bugfix: leading quote (") in string-type template() lead to thight loop
on startup
- bugfix: no error msg on invalid field option in legacy/string template
- bugfix: potential segfault due to invalid param handling in comparisons
This could happen in RainerScript comparisons (like contains); in some
cases an unitialized variable was accessed, which could lead to an
invalid free and in turn to a segfault.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=372
Thanks to Georgi Georgiev for reporting this bug and his great help
in solving it.
- bugfix: no error msg on unreadable $IncludeConfig path
- bugfix: $IncludeConfig did not correctly process directories
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=376
The testbench was also enhanced to check for these cases.
Thanks to Georgi Georgiev for the bug report.
- bugfix: make rsyslog compile on kfreebsd again
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=380
Thanks to Guillem Jover for the patch.
- bugfix: garbled message if field name was used with jsonf property option
The length for the field name was invalidly computed, resulting in either
truncated field names or including extra random data. If the random data
contained NULs, the rest of the message became unreadable.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=374
- bugfix: potential segfault at startup with property-based filter
If the property name was followed by a space before the comma, rsyslogd
aborted on startup. Note that no segfault could happen if the initial
startup went well (this was a problem with the config parser).
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=381
- bugfix: imfile discarded some file parts
File lines that were incomplete (LF missing) *at the time imfile polled
the file* were partially discarded. That part of the line that was read
without the LF was discarded, and the rest of the line was submitted in
the next polling cycle. This is now changed so that the partial content
is saved until the complete line is read. Note that the patch affects
only read mode 0.
Thanks to Milan Bartos for providing the base idea for the solution.
- Merged also fixes for unreliable kernel timestamp regression (bnc#783967),
which will be picked up in a later v7-stable release:
- imklog: added $klogParseKernelTimestamp option (default off),
wich reverts to the 5.8.x behavior to use receive time for the
kernel messages instead to try parse and convert the kernel
timestamp, what is not reliable on some hardware (intel i7/Xeon).
- imklog: added $klogKeepKernelTimestamp option (default off),
causing to not remove the kernel timestamp from the message
after a successful conversion.
- imklog: fixed a conversion bug causing a <1sec incorrectness
of the message time when the kernel timestamp is parsed.
- Removed {} arround RSYSLOG_PARAMS variable in service file. systemd
seems sometimes to not like it any more (bnc#788330).
* Tue Nov 20 2012 mt@suse.com
- Require syslog-service >= 2.0 on 12.3, otherwise < 2.0, which
contain the /etc/init.d/syslog init script.
* Tue Nov 13 2012 mt@suse.com
- imuxsock: do not log EAGAIN in nonblocking recvfrom (bnc#734672)
* Mon Nov 12 2012 mt@suse.com
- Removed handling of the -c <compat version> option which is
obsolete in rsyslog-7.x.
- Fixed build requires / deps to work on 12.x and SLE-11-SP2.
- Initialized RSYSLOG_PARAMS env variable in service file.
- Marked additional log socket config as ghost.
* Fri Nov 09 2012 mt@suse.com
- Readded things removed in previous change, that is compat version
and params variable use, generation of additional (chroot) log
sockets include file, xconsole handling in rsyslog.service.
- Fixed liblognorm conditional build flag dependencies, removed all
suse version dependencies.
- Changed to install in /usr/sbin, compatibility link in /sbin.
- Added klogd to build conflicts to resolve build service deps
* Tue Nov 06 2012 tittiatcoke@gmail.com
- Enabled rsyslog own systemd service file. This to resolve the
current issue with a non starting system logger with systemd 185.
(see also bnc#788330)
* Mon Oct 29 2012 mt@suse.com
- Update to 7.2.1 (v7-stable), a pure bug-fixing release:
- bugfix: ruleset()-object did only support a single statement
- added -D rsyslogd option to enable config parser debug mode
- improved syntax error messages by outputting the error token
- the rsyslog core now suspeneds actions after 10 failures in
a row. This was former the case after 1,000 failures and could
cause rsyslog to be spammed/ressources misused.
See the v6 compatibility doc for more details.
- ommongodb rate-limits error messages to prevent spamming the
syslog closes (for v7.2):
http://bugzilla.adiscon.com/show_bug.cgi?id=366
- Enabled compilation of kmsg, the kernel’s new structured logging
system modile, mmaudit the message modification module supporting
Linux audit format and mmjsonparse providing the cee-enhanced
syslog format support message modification module.
* Wed Oct 24 2012 mt@suse.com
- Update to 7.2.0 (v7-stable) a full structured-logging/CEE enabled
version which provides following features compared to v5-stable:
* greatly improved configuration language – the new language is
much more intuitive than the legacy format. It will also prevent
some typical mistakes simply be not permitting these invalid
constructs. Note that legacy format is still fully supported
(and you can of course do the same mistakes if you use legacy
format).
* greatly improved execution engine – with nested if/then/else
constructs as well as the capability to modify variables during
processing.
* full support for structured logging and project lumberjack/CEE.
this includes everything from being able to create, interpret
and handle JSON-based structured log messages, including the
ability to normalize legacy text log messages.
* more plugins – like support for MongoDB, HDFS, and ElasticSearch
as well as for the kernel’s new structured logging system.
* higher performance – many optimizations all over the code, like
5 to 10 times faster execution time for script-based filters,
enhanced multithreaded TCP input plugin, DNS cache and many more.
* Wed Oct 17 2012 fcrozat@suse.com
- Fix build with new systemd location.
* Wed Oct 17 2012 mt@suse.com
- Use RFC-5424 conform log format with RFC-3339 high-precision
timestamps by default, removed obsolete rsyslog.early.conf.
* Mon Sep 24 2012 andreas.stieger@gmx.de
- prevent installation with other providers of syslog (bnc#780608)
* Fri Sep 21 2012 mt@suse.com
- Changed default /etc/rsyslog.conf we install to not use multiple
facilities with the same priority pattern in one statement using
the comma operator. This started to cause a start failure with
rsyslog-6.4.x (bnc#780607) and seems to be a bug in rsyslog.
Upstream report http://bugzilla.adiscon.com/show_bug.cgi?id=358,
switched to use alternative syntax using semicolon separator.
* Thu Sep 20 2012 andreas.stieger@gmx.de
- update to 6.4.2 [V6-STABLE] 2012-09-20:
- bugfix: potential abort, if action queue could not be properly
started
- bugfix: remove invalid socket option call from imuxsock
- bugfix: missing support for escape sequences in RainerScript
- bugfix: config validation run did not always return correct
return state
* Thu Sep 20 2012 andreas.stieger@gmx.de
- add rsyslog-6.4.1-CheckConnection-no-return-in-nonvoid-function.patch
to fix rsyslog no-return-in-nonvoid-function netstrm.c:258 in
CheckConnection()
* Mon Sep 17 2012 mt@suse.com
- Update to 6.4.1 [V6-STABLE] 2012-09-06:
- bugfix: multiple main queues with same queue file name were not
detected. This lead to queue file corruption. While the root
cause is a config error, it is a bug that this important and
hard to find config error was not detected by rsyslog.
- bugfix: “jsonf” property replacer option did generate invalid
JSON in JSON, we have “fieldname”:”value”, but the option
emitted “fieldname”=”value”. Interestingly, this was accepted
by a couple of sinks, most importantly elasticsearch. Now the
correct format is emitted, which causes a remote chance that
some things that relied on the wrong format will break.
Thanks to Miloslav Trmač for the patch
- change $!all-json did emit an empty (thus non-JSON) string if
no libee data was present. It now emits {} and thus valid JSON.
There is a small risk that this may break some things that
relied on the previous inconsistency. Thanks to Miloslav Trmač
for the patch
- bugfix: omusrsmsg incorrect return state & config warning
handling. During config file processing, Omusrmsg often
incorrectly returned a warning status, even when no warning was
present (caused by uninitialized variable). Also, the core
handled warning messages incorrectly, and treated them as
errors. As a result, omusrmsg (most often) could not properly be
loaded. Note that this only occurs with legacy config action
syntax. This was a regression caused by an incorrect merge in to
the 6.3.x codebase.
Thanks to Stefano Mason for alerting us of this bug.
- bugfix: Fixed TCP CheckConnection handling in omfwd.c. Interface
needed to be changed in lower stream classes. Syslog TCP Sending
is now resumed properly. Unfixed, that lead to non-detection of
downstate of remote hosts.
* Tue Sep 04 2012 andreas.stieger@gmx.de
- License is (GPL-3.0+ and Apache-2.0), [bnc#778591]
- The template subpackage was never published, remove obsoletes
* Fri Aug 31 2012 andreas.stieger@gmx.de
- update to 6.4.0 [BETA] 2012-08-20
This is the first version of the 6.4.0 stable branch.
http://www.rsyslog.com/changelog/
- add rsyslog-6.3.11-glblCheckCnf-no-return-in-nonvoid-function.patch
to fix compiler warning
- rsyslog-6.2.2-link-libestr.patch no longer required
- template functionality was removed upstream
* Mon Aug 27 2012 andreas.stieger@gmx.de
- add support for mmnormalize (via liblognorm) and template modules
* Tue Jul 03 2012 andreas.stieger@gmx.de
- update to 6.2.2 [V6-stable] 2012-06-13
http://www.rsyslog.com/changelog-for-6-2-2-v6-stable/
- add rsyslog-6.2.2-link-libestr.patch to correctly link against
libestr
* Sun Jul 01 2012 andreas.stieger@gmx.de
- updated to 5.8.12 [V5-stable] 2012-06-06
- add small delay (50ms) after sending shutdown message
- support for resolving huge groups
- bugfix: delayble source could block action queue, even if there was
- bugfix: disk queue was not persisted on shutdown, regression of fix to
- bugfix/omudpspoof: problems, including abort, happend when run on
- bugfix: if debug message could end up in log file when forking
- bugfix/tcpflood: sending small test files did not work correctly
- bugfix: potential hang due to mutex deadlock
- bugfix: property PROCID empty instead of proper nilvalue if not present
* Mon May 07 2012 mt@suse.com
- Updated to 5.8.11 [V5-stable] 2012-05-03:
- bugfix: ommysql did not properly init/exit the mysql runtime
library this could lead to segfaults. Triggering condition:
multiple action instances using ommysql. Thanks to Tomas
Heinrich for reporting this problem and providing an initial
patch (which my solution is based on, I need to add more code
to clean the mess up).
- bugfix: rsyslog did not terminate when delayable inputs were
blocked due to unvailable sources. Fixes:
http://bugzilla.adiscon.com/show_bug.cgi?id=299
Thanks to Marcin M for bringing up this problem and Andre
Lorbach for helping to reproduce and fix it.
- bugfix: active input in “light delay state” could block
rsyslog termination, at least for prolonged period of time
- bugfix: imptcp input name could not be set. Config directive
was accepted, but had no effect
bugfix: assigned ruleset was lost when using disk queues
This looked quite hard to diagnose for disk-assisted queues,
as the pure memory part worked well, but ruleset info was lost
for messages stored inside the disk queue.
- bugfix: hostname was not requeried on HUP
Thanks to Per Jessen for reporting this bug and Marius
Tomaschewski for his help in testing the fix.
- bugfix: inside queue.c, some thread cancel states were not
correctly reset. While this is a bug, we assume it did have
no practical effect because the reset as it was done was set
to the state the code actually had at this point. But better
fix this…
- Removed obsolete requery hostname patch
* Thu Apr 12 2012 mt@suse.com
- Added upstream patchset to requery hostname on HUP (bnc#755857)
- Removed obsolete rsyslog-5.8.7-systemd-log-socket.patch
- Updated to 5.8.10 [V5-stable] 2012-04-05:
- bugfix: segfault on startup if $actionqueuefilename was missing
for disk queue config. Thanks to Tomas Heinrich for the patch.
- bugfix: segfault if disk-queue was started up with old queue file
Thanks to Tomas Heinrich for the patch.
- bugfix: memory leak in array passing output module mode
by 5.8.9 [V5-stable] 2012-03-15:
- added tool to recover disk queue if .qi file is missing
(recover_qi.pl)
Thanks to Kaiwang Chen for contributing this tool
- bugfix: stopped DA queue was never processed after a restart
due to a regression from statistics module.
- added better doc for statsobj interface.
Thanks to Kaiwang Chen for his suggestions and analysis in
regard to the stats subsystem.
by 5.8.8 [V5-stable] 2012-03-05:
- bugfix: omprog made rsyslog abort on startup if not binary to
execute was configured
- bugfix: imklog invalidly computed facility and severity
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=313
improves interop with systemd journal
* Mon Feb 20 2012 mt@suse.com
- Detect if we have to use the new /run/systemd/journal/syslog
socket instead of the /dev/log under newer systemd versions.
Obsoletes listen.conf installed by systemd (bnc#747871).
- updated to 5.8.7 [V5-stable]:
- bugfix: instabilities when using RFC5424 header fields
Thanks to Kaiwang Chen for the patch
- bugfix: imuxsock did truncate part of received message if it did
not contain a proper date. The truncation occured because we
removed that part of the messages that was expected to be the date.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=295
- bugfix: potential abort after reading invalid X.509 certificate
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=290
Thanks to Tomas Heinrich for the patch
- bugfix: stats counter were not properly initialized on creation
- FQDN hostname for multihomed host was not always set to the correct
name if multiple aliases existed. Thanks to Tomas Heinreich for the
patch.
- updated to 5.8.6 [V5-stable]:
- bugfix: missing whitespace after property-based filter was not
detected
- bugfix: $OMFileFlushInterval period was doubled - now using correct
value
- bugfix: ActionQueue could malfunction due to index error
Thanks to Vlad Grigorescu for the patch
- bugfix: $ActionExecOnlyOnce interval did not work properly
Thanks to Tomas Heinrich for the patch
- bugfix: race condition when extracting program name, APPNAME,
structured data and PROCID (RFC5424 fields) could lead to invalid
characters e.g. in dynamic file names or during forwarding (general
malfunction ofthese fields in templates, mostly under heavy load)
- bugfix: imuxsock did no longer ignore message-provided timestamp,
if so configured (the *default*). Lead to no longer sub-second
timestamps.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=281
- bugfix: omfile returns fatal error code for things that go really
wrong previously, RS_RET_RESUME was returned, which lead to a loop
inside the rule engine as omfile could not really recover.
- bugfix: imfile did invalid system call under some circumstances
when a file that was to be monitored did not exist BUT the state
file actually existed. Mostly a cosmetic issue. Root cause was
incomplete error checking in stream.c; so patch may affect other
code areas.
- bugfix: rsyslogd -v always said 64 atomics were not present
thanks to mono_matsuko for the patch
- Changed /etc/rsyslog.early.conf to just include rsyslog.conf,
fixed spec to use sd-daemon.[ch] from docs on 11.4 only.
* Mon Feb 20 2012 mt@suse.com
- Cleaned up the config files a bit, updated comments in config
file, marked the /etc/rsyslog.early.conf obsolete.
Note: rsyslog will be started early/before network using its normal
/etc/rsyslog.conf config file (adopted scripts in syslog-service
package). When any kind of remote logging is in use, then on-disk
queues should be enabled. To start it after the network, please set
the SYSLOG_REQUIRES_NETWORK=yes variable in /etc/sysconfig/syslog
(bnc#728565).
* Wed Sep 07 2011 mrueckert@suse.de
- update to 5.8.5 [V5-stable]
- bugfix/security: off-by-two bug in legacy syslog parser,
CVE-2011-3200 bnc#714658
- bugfix: mark message processing did not work correctly
- bugfix: potential hang condition during tag emulation
- bugfix: too-early string termination during tag emulation
- bugfix: The NUL-Byte for the syslogtag was not copied in MsgDup
(msg.c)
- bugfix: fixed incorrect state handling for Discard Action
(transactions) Note: This caused all messages in a batch to be
set to COMMITTED, even if they were discarded.
* Wed Aug 24 2011 mt@suse.de
- Adopted to require new syslog-service package on 12.x, that
provides the /etc/init.d/syslog LSB init script and systemd
syslog.service service file. Removed rsyslog.service file
installation from spec file. (fate#311316).
* Fri Aug 19 2011 mrueckert@suse.de
- Update to 5.8.4 [V5-stable]
- bugfix: potential misadressing in property replacer
- bugfix: memcpy overflow can occur in allowed sender checkig if
a name is resolved to IPv4-mapped-on-IPv6 address Found by
Ismail Dönmez at suse
- bugfix: potential misadressing in property replacer
- bugfix: MSGID corruption in RFC5424 parser under some
circumstances closes:
http://bugzilla.adiscon.com/show_bug.cgi?id=275
- remove rsyslog-5.8.0-memcpy.patch:
applied upstream
- fix build for older distros:
only buildrequire systemd-devel for newer than 11.4, use systemd
for the others
* Fri Aug 19 2011 crrodriguez@opensuse.org
- Fix build with new gnutls
* Tue Aug 02 2011 aj@suse.de
- Require systemd-devel to follow package split.
* Wed Jul 13 2011 mrueckert@suse.de
- drop modules imtemplate and omtemplate, the 2 modules are base
templates for people who want to develop their own modules.
* Tue Jul 12 2011 mrueckert@suse.de
- enabled a few more modules which dont pull extra dependencies:
impstats, pmcisconames, pmaixforwardedfrom, pmsnare, pmrfc3164sd,
omruleset, mmsnmptrapd
* Tue Jul 12 2011 mrueckert@suse.de
- guard the file list entry for rsyslog.service with
if {with systemd}. Please keep the package working on older
distros.
* Tue Jul 12 2011 mrueckert@suse.de
- upstream asked to change the syntax in the default config files
to the new syntax:
old: *.* * # (write to all)
new: *.* :omusrmsg:*
old: *.* $channel
new: *.* :omfile:$channel
from what i can see we are only affected with:
old: *.emerg *
new: *.emerg :omusrmsg:*
* Tue Jul 12 2011 mrueckert@suse.de
- Updated to 5.8.3 [V5-stable]
- systemd support: set stdout/stderr to null - thx to Lennart for
the patch
- added support for the ":omusrmsg:" syntax in configuring user
messages
- added support for the ":omfile:" syntax in configuring user
messages Note: previous outchannel syntax will generate a
warning message. This may be surprising to some users, but it
is quite urgent to alert them of the new syntax as v6 can no
longer support the previous one.
* Tue Jun 21 2011 mt@suse.de
- Updated to 5.8.2 [V5-stable] (bnc#701282) a maintenance release,
containing only stability fixes:
- bugfix: problems in failover action handling
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=270
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=254
- bugfix: mutex was invalidly left unlocked during action processing
At least one case where this can occur is during thread shutdown,
which may be initiated by lower activity. In most cases, this is
quite unlikely to happen. However, if it does, data structures may be
corrupted which could lead to fatal failure and segfault. I detected
this via a testbench test, not a user report. But I assume that some
users may have had unreproducable aborts that were cause by this bug.
- bugfix: memory leak in imtcp & subsystems under some circumstances
This leak is tied to error conditions which lead to incorrect cleanup
of some data structures. [backport from v6]
- bugfix/improvement:$WorkDirectory now gracefully handles trailing
slashes
* Tue May 31 2011 aj@suse.de
- Add systemd service file back (bnc#696963).
* Fri May 27 2011 mt@suse.de
- Removed touch of obsolete /var/log/boot.log from spec post.
* Thu May 19 2011 mrueckert@suse.de
- update to 5.8.1
- bugfix: invalid processing in QUEUE_FULL condition If the the
multi-submit interface was used and a QUEUE_FULL condition
occured, the failed message was properly destructed. However,
the rest of the input batch, if it existed, was not processed.
So this lead to potential loss of messages and a memory leak.
The potential loss of messages was IMHO minor, because they
would have been dropped in most cases due to the queue
remaining full, but very few lucky ones from the batch may have
made it. Anyhow, this has now been changed so that the rest of
the batch is properly tried to be enqueued and, if not
possible, destructed.
- new module mmsnmptrapd, a sample message modification module
This can be useful to reformat snmptrapd messages and also
serves as a sample for how to write message modification
modules using the output module interface. Note that we
introduced this new functionality directly into the stable
release, as it does not modify the core and as such cannot have
any side-effects if it is not used (and thus the risk is solely
on users requiring that functionality).
- bugfix: rate-limiting inside imuxsock did not work 100% correct
reason was that a global config variable was invalidly accessed
where a listener variable should have been used. Also
performance-improved the case when rate limiting is turned off
(this is a very unintrusive change, thus done directly to the
stable version).
- bugfix: $myhostname not available in RainerScript (and no error
message) closes:
http://bugzilla.adiscon.com/show_bug.cgi?id=233
- bugfix: memory and file descriptor leak in stream processing
Leaks could occur under some circumstances if the file stream
handler errored out during the open call. Among others, this
could cause very big memory leaks if there were a problem with
unreadable disk queue files. In regard to the memory leak, this
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=256
- bugfix: doc for impstats had wrong config statements also,
config statements were named a bit inconsistent, resolved that
problem by introducing an alias and only documenting the
consistent statements Thanks to Marcin for bringing up this
problem.
- bugfix: IPv6-address could not be specified in omrelp this was
due to improper parsing of ":" closes:
http://bugzilla.adiscon.com/show_bug.cgi?id=250
- bugfix: TCP connection invalidly aborted when messages needed
to be discarded (due to QUEUE_FULL or similar problem)
- bugfix: $LocalHostName was not honored under all circumstances
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=258
- bugfix(minor): improper template function call in syslogd.c
* Fri Apr 29 2011 idoenmez@novell.com
- Add rsyslog-5.6.5-memcpy.patch: fix overflowing memcpy call in
runtime/net.c
* Wed Apr 27 2011 mrueckert@suse.de
- move most of the additional requirements and subpackages into
conditionals so we can switch them on and off by more easily.
* Tue Apr 26 2011 mt@suse.de
- Dropped obsolete rsyslog-systemd-integration.bnc656104.diff
* Tue Apr 26 2011 mrueckert@suse.de
- dont ship the systemd service file for now.
* Sun Apr 24 2011 mrueckert@suse.de
- update to 5.8.0 (v5-tsable)
This is the new v5-stable branch, importing all feature from the
5.7.x versions. To see what has changed in regard to the previous
v5-stable, check the entries for 5.7.x in
/usr/share/doc/packages/rsyslog/ChangeLog.
- bugfix: race condition in deferred name resolution
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=238
Special thanks to Marcin for his persistence in helping to solve this
bug.
- bugfix: DA queue was never shutdown once it was started
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=241
- dropped patch rsyslog-deferred-dns-query-race.diff
included in the release
- refreshed rsyslog-systemd-integration.bnc656104.diff:
most of the patch went upstream just a small chunk left
- fixed the with_dbi conditional, it was using the build_with_relp.
- added a new conditional with_systemd and moved all the systemd
specific things from suse_version >= 1140 to the with_systemd
conditional. the patch line in the preamble should be
unconditional.
* Fri Apr 08 2011 mt@suse.de
- bugfix: race condition in deferred name resolution (id=238)
from v5.8.0 candidate.
* Thu Mar 24 2011 mt@suse.de
- Updated to 5.6.5 (v5-stable) with following bugfixes:
* bugfix: failover did not work correctly if repeated msg
reduction was on.
affected directive: $ActionExecOnlyWhenPreviousIsSuspended on
* bugfix: omlibdbi did not use password from rsyslog.conf
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=203
* bugfix(kind of): tell users that config graph can currently
not be generated
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=232
* bugfix: discard action did not work under some circumstances
fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=217
(bnc#676041)
* bugfix: potential abort condition when $RepeatedMsgReduction
were set to on as well as potentially in a number of other places
where MsgDup() was used. This only happened when the imudp input
module was used and it depended on name resolution not yet had
taken place. (bnc#679030)
* bugfix: fixed a memory leak and potential abort condition
this could happen if multiple rulesets were used and some output
batches contained messages belonging to more than one ruleset.
fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=226
fixes: http://bugzilla.adiscon.com/show_bug.cgi?id=218
* bugfix: memory leak when $RepeatedMsgReduction on was used
bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=225
(bnc#681568)
- Merged systemd socket activation support
* Wed Feb 02 2011 mt@suse.de
- update to 5.6.3 (v5-stable) with following bugfixes (digest):
* action processor released mememory too early, resulting in
potential issue in retry cases (very unlikely).
* batch processing flagged invalid message as "bad" under some
circumstances
* unitialized variable could cause issues under extreme
conditions plus some minor nits.
* batches which had actions in error were not properly retried
in all cases
* imfile did duplicate messages under some circumstances
- enabled plain tcp input, unix socket output, last message
parser and the libdbi module as separate package.
- disabled systemd patch for openSUSE <= 11.3
* Thu Jan 20 2011 mt@suse.de
- Improved systemd socket activation support to allow multiple
unix sockets and activation in forking mode (bnc#656197).
* Fri Dec 03 2010 mt@suse.de
- update to 5.6.2 (v5-stable) with following bugfixes:
* compile failed on systems without epoll_create1()
Thanks to David Hill for providing a fix.
* atomic increment for msg object may not work correct on
all platforms. Thanks to Chris Metcalf for the patch
* replacements for atomic operations for non-int sized types
had problems. At least one instance of that problem could
potentially lead to abort (inside omfile).
- Increased mark frequency in rsyslog.conf to 1 hour
- Enabled duplicate message reduction in rsyslog.conf to catch
at least buggy programs running amok and writting same message
zillion times until the disk gets out of space (bnc#656197).
- Merged rsyslog-systemd-integration.bnc656104.diff (fuzz=0).
* Mon Nov 29 2010 mt@suse.de
- update to 5.6.1
This release addresses a TLS bug, that has been bothering a lot
of users lately. It stops rsyslog from looping, thus disabling
functionality and bearing the risk of unresponsiveness of the
whole system. Other issues have been fixed for imptcp, failing
testbench, segfault on empty templates and failed compile.
For more detailed information, please review the ChangeLog and
http://bugzilla.adiscon.com/show_bug.cgi?id=194,
http://bugzilla.adiscon.com/show_bug.cgi?id=204,
http://bugzilla.adiscon.com/show_bug.cgi?id=206.
- applied systemd integration base patch (without the service and
socket unit files, because we'll use same for all syslog damons)
extracted from git master (bnc#656104).
* Sat Nov 20 2010 coolo@novell.com
- build with libnet-devel on 11.4
* Mon Nov 15 2010 chris@computersalat.de
- update to 5.6.0
This release brings all changes and enhancements of the 5.5.x
series to the v5-stable branch.
- bugfix: a couple of problems that imfile had on some platforms,
namely Ubuntu (not their fault, but occured there)
- bugfix: imfile utilizes 32 bit to track offset. Most importantly,
this problem can not experienced on Fedora 64 bit OS (which has
64 bit long's!)
- removed obsolete patch
- xconsole-pipe-loop
- rpmlint
- name-repeated-in-summary C Rsyslog
* Wed Apr 28 2010 mt@suse.de
- Added $klogConsoleLogLevel 1 to the config, to use same default
[KERNEL_LOGLEVEL in /etc/sysconfig/syslog] as klogd (bnc#593699).
- Improved filter to discard iptables msgs higher err on console,
changed to set default file template instead per file, removed
duplicate filters (bnc#593699).
* Tue Apr 27 2010 mt@suse.de
- Applied fix to avoid a tight send-retry loop in case there is
nobody receiving the messages sent to the xconsole pipe
(bnc#597293, http://bugzilla.adiscon.com/show_bug.cgi?id=186).
- Disabled relp support for < 11.3 (librelp is new)
- Fixed to create /var/run/rsyslog in post-install (rpmlint)
* Wed Apr 14 2010 mrueckert@suse.de
- dropped install_all_modules_in_lib conditional and all related
code
- new subpackages
- enable RELP support. new depdendency librelp
- enable diagnotic tools.
- enable UDP spoof support. new dependency libnet
- moved module paths to 2 variables defined on top of the spec
* Tue Apr 13 2010 mt@suse.de
- Updated to rsyslog version 5.4.0 (v5-stable). This version begins
a new stable series based on the 5.3.x series, which has been
proven rather well in practice. The new 5.4.0 contains fixes for
all known problems. See ChangeLog file for a detailed history.
The main new feature is speed: several optimizations were done,
including support for epoll in tcp listeners.
- Added new lmzlibw.so and omruleset.so to the file list.
- Recompressed original tar.gz source archive using bzip2.
* Wed Sep 09 2009 mt@suse.de
- Added read-only RSYSLOGD_NATIVE_VERSION sysconfig/syslog variable,
that is set to the native mode version number for the -c parameter
while every installation and used in the /etc/init.d/syslog script,
except the user overrides this default in RSYSLOGD_COMPAT_VERSION.
* Wed Sep 02 2009 mt@suse.de
- Updated to rsyslog version 4.4.1 (v4-stable), a bug-fixing release,
providing some important fixes for issues that have only been
detected after the beta phase. Some of them are serious (like a
segfault when UDP messageforwarding is activated), so users of
4.4.0 are urged to upgrade to this release. Changelog for 4.4.1:
* features requiring Java are automatically disabled if Java
is not present (thanks to Michael Biebl for his help!)
* bugfix: invalid double-quoted PRI, among others in outgoing
messages. This causes grief with all receivers.
Bug tracker: http://bugzilla.adiscon.com/show_bug.cgi?id=147
* bugfix: Java testing tools were required, even if testbench
was disabled. This resulted in build errors if no Java was
present on the build system, even though none of the selected
option actually required Java. (I forgot to backport a similar
fix to newer releases).
* bugfix (backport): omfwd segfault. Note that the orginal (higher
version) patch states this happens only when debugging mode is
turned on. That statement is wrong: if debug mode is turned off,
the message is not being emitted, but the division by zero in
the actual parameters still happens.
- Removed jave2-devel-packages from build requires again
* Tue Sep 01 2009 mt@suse.de
- Updated to rsyslog version 4.4.0, the actual stable 4.4.x series.
It provides several bugfixes, performance improvements and new
features: It adds generic network stream server for syslog, the
capability to rebind the send socket of the UDP output section,
allows multiple tcp listeners, multiple recipients in ommail,
new plugins as omprog, improved documentation and testbench
with a config switch. Please review ChangeLog file for details.
- Removed obsolete moddirs patch (included in 4.4.0)
- Added java2-devel-packages to BuildRequires (for test suite)
- Enabled omprog and omtemplate plugins, added them and the
lmstrmsrv plugin to the base-plugins file list.
* Mon Apr 20 2009 mt@suse.de
- Improved config file comments about usage of additional
modules provided in separate rsyslog-module packages.
- Enabled GnuTLS (syslog-transport-tls) support module.
* Mon Apr 20 2009 mt@suse.de
- Updated to rsyslog 3.20.6 [v3-stable]
* Mon Dec 15 2008 mt@suse.de
- Security fix to honor $AllowedSender settings (bnc#457273).
- Security fix [DoS] from 3.20.2 to emit a discard message every
minute only (when DisallowWarning enabled) instead of every time;
this prevernts an attacker can fill the disk (bnc#457273).
* Wed Sep 10 2008 schwab@suse.de
- Run autoreconf.
* Tue Sep 09 2008 mt@suse.de
- Enabled mail, imfile and imtemplate modules
- Enabled snmp module, packaged as rsyslog-module-snmp
- Added patch to support multiple module directories,
in our case /lib[64]/rsyslog:/usr/lib[64]/rsyslog
* Thu Sep 04 2008 mt@suse.de
- initial rsyslog 3.18.3 package
/usr/lib64/rsyslog/mmaudit.so /usr/lib64/rsyslog/mmjsonparse.so /usr/lib64/rsyslog/mmleefparse.so /usr/lib64/rsyslog/mmnormalize.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Fri Oct 30 23:00:06 2026