- Update to 7.4.2 [v7.4-stable] (bnc#828140,CVE-2013-4758):
- bugfix: in RFC5425 TLS, multiple wildcards in auth could cause
segfault
- bugfix: RainerScript object required parameters were not properly
checked - this clould result to segfaults on startup if parameters
were missing.
- bugfix: double-free in omelasticsearch
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=461
a security advisory for this bug is available at:
http://www.lsexperts.de/advisories/lse-2013-07-03.txt
PLEASE NOTE: This issue only existed if omelasticsearch was used
in a non-default configuration, where the "errorfile" parameter
was specified. Without that parameter set, the bug could not be
triggered. Thanks to Markus Vervier and Marius Ionescu for providing
a detailled bug report. Special thanks to Markus for coordinating
his security advisory with us.
- bugfix: omrelp potential segfault at startup on invalid config
parameters
- bugfix: small memory leak when $uptime property was used
- bugfix: potential segfault on rsyslog termination in imudp
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=456
- bugfix: lmsig_gt abort on invalid configuration parameters
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=448
Thanks to Risto Laanoja for the patch.
- imtcp: fix typo in "listner" parameter, which is "listener"
Currently, both names are accepted.
- solved build problems on FreeBSD
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=457
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=458
Thanks to Christiano for reproting and suggesting patches
- solved build problems on CENTOS5
OBS-URL: https://build.opensuse.org/request/show/182284
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=73
- bugfix: in RFC5425 TLS, multiple wildcards in auth could cause
segfault
- bugfix: RainerScript object required parameters were not properly
checked - this clould result to segfaults on startup if parameters
were missing.
- bugfix: double-free in omelasticsearch
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=461
a security advisory for this bug is available at:
http://www.lsexperts.de/advisories/lse-2013-07-03.txt
PLEASE NOTE: This issue only existed if omelasticsearch was used
in a non-default configuration, where the "errorfile" parameter
was specified. Without that parameter set, the bug could not be
triggered. Thanks to Markus Vervier and Marius Ionescu for providing
a detailled bug report. Special thanks to Markus for coordinating
his security advisory with us.
- bugfix: omrelp potential segfault at startup on invalid config
parameters
- bugfix: small memory leak when $uptime property was used
- bugfix: potential segfault on rsyslog termination in imudp
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=456
- bugfix: lmsig_gt abort on invalid configuration parameters
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=448
Thanks to Risto Laanoja for the patch.
- imtcp: fix typo in "listner" parameter, which is "listener"
Currently, both names are accepted.
- solved build problems on FreeBSD
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=457
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=458
Thanks to Christiano for reproting and suggesting patches
OBS-URL: https://build.opensuse.org/package/show/Base:System/rsyslog?expand=0&rev=156
- bugfix: some man pages were not properly installed either
rscryutil or rsgtutil man was installed, but not both.
Thanks to Marius Tomaschewski for the patch.
- bugfix: potential segfault on startup when builtin module was
specified in module() statement.
Thanks to Marius Tomaschewski for reporting the bug.
- bugfix: segfault due to invalid dynafile cache handling
Accidently, the old-style cache size parameter was used when the
dynafile cache was created in a RainerScript action. If the
old-style size was lower than the one actually set, this lead to
misadressing when the size was overrun, and that could lead to
all kinds of “interesting things”, often in segfaults.
closes: http://bugzilla.adiscon.com/show_bug.cgi?id=440
OBS-URL: https://build.opensuse.org/package/show/Base:System/rsyslog?expand=0&rev=147
- Adopted config file to stop instead of deprecated "~" action.
- Enabled log file signing module lmsig_gt using GuardTime as
separate rsyslog-module-guardtime package.
- Moved previously enabled log file encryption module lmcry_gcry
and its utility into a separate rsyslog-module-gcrypt package.
- update to 7.3.13 [beta] 2013-04-29:
- update to 7.3.12 [devel] 2013-04-25:
- update to 7.3.11 [devel] 2013-04-23
- Enabled systemd imjournal,omjournal modules on > 12.3.
- Enabled mmanon, providing anonymization support
- Enabled lmcry_gcry.so, providing log file encryption support
and the rscryutil utility to manage the encrypted log files.
- Removed obsolete --enable-pthreads configure option.
OBS-URL: https://build.opensuse.org/request/show/173999
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=69
- Fixed relp build requires change, which broke SLE-11 build.
- update to 7.2.5 [v7-stable]:
- build system cleanup
- bugfix: omelasticsearch did not properly compile on some platforms
due to missing libmath
- bugfix: on termination, actions were incorrectly called
- bugfix: very large memory consumption (and probably out of memory) when
FromPos was specified in template, but ToPos not.
- bugfix: timeval2syslogTime cause problems on some platforms
due to invalid assumption on structure data types.
- bugfix: compile errors in im3195
- bugfix: doGetFileCreateMode() had invalid validity check
- bugfix: mmjsonparse errornously returned action error when no
CEE cookie was present.
OBS-URL: https://build.opensuse.org/request/show/148546
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=63
- Fixed changelog to refer to bnc#790298 instead #90298
- Enable rsyslog.service and create the syslog.service alias link
in post install -- regardless of a preset config (bnc#790805).
- Check the existence of /etc/init.d/syslog script before calling
the restart_on_update and stop_on_removal macros to avoid errors
on update. Since openSUSE 12.3, no syslog init script is shipped
(bnc#790298,bnc#750478).
- Update to 7.2.4 [v7-stable] with following changes
OBS-URL: https://build.opensuse.org/request/show/147911
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=62
- Enable rsyslog.service and create the syslog.service alias link
in post install -- regardless of a preset config (bnc#790805).
- Check the existence of /etc/init.d/syslog script before calling
the restart_on_update and stop_on_removal macros to avoid errors
on update. Since openSUSE 12.3, no syslog init script is shipped
(bnc#90298,bnc#750478).
OBS-URL: https://build.opensuse.org/request/show/147807
OBS-URL: https://build.opensuse.org/package/show/Base:System/rsyslog?expand=0&rev=122
- enhance: permit RFC3339 timestamp in local log socket messages
Thanks to Sebastien Ponce for the patch.
- imklog: added ParseKernelTimestamp parameter (import from 5.10.2)
Thanks to Marius Tomaschewski for the patch.
- fix missing functionality: ruleset(){} could not specify ruleset queue
The "queue.xxx" parameter set was not supported, and legacy ruleset
config statements did not work (by intention). The fix introduces the
"queue.xxx" parameter set. It has some regression potential, but only
for the new functionality. Note that using that interface it is possible
to specify duplicate queue file names, which will cause trouble. This
will be solved in v7.3, because there is a too-large regression
potential for the v7.2 stable branch.
- imklog: added KeepKernelTimestamp parameter (import from 5.10.2)
Thanks to Marius Tomaschewski for the patch.
- bugfix: imklog mistakenly took kernel timestamp subseconds as nanoseconds
... actually, they are microseconds. So the fractional part of the
timestamp was not properly formatted. (import from 5.10.2)
Thanks to Marius Tomaschewski for the bug report and the patch idea.
- bugfix: supportoctetcountedframing parameter did not work in imptcp
- bugfix: modules not (yet) supporting new conf format were not properly
registered. This lead to a "module not found" error message instead of
the to-be-expected "module does not support new style" error message.
That invalid error message could be quite misleading and actually stop
people from addressing the real problem (aka "go nuts" ;))
- bugfix: template "type" parameter is mandatory (but was not)
- bugfix: some message properties could be garbled due to race condition
This happened only on very high volume systems, if the same message was
being processed by two different actions. This was a regression caused
by the new config processor, which did no longer properly enable msg
OBS-URL: https://build.opensuse.org/package/show/Base:System/rsyslog?expand=0&rev=120