Changelog for rsyslog-8.2406.0-150500.396.3.x86_64.rpm :

* Wed Jul 24 2024 Thomas.BlumeAATTsuse.com- Upgrade to rsyslog 8.2406.0-patches replaced by upgrade (see details in upgrade logs below) 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* 2023-11-29: Revert \"Update omlibdbi.c\"
* 2023-11-21: imkmsg: add params \"readMode\" and \"expectedBootCompleteSeconds\"
* 2023-11-10: testbench: fix \"typo\" in test case
* 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures
* 2023-10-31: imkmsg: add module param parseKernelTimestamp
* 2023-11-03: imfile: remove state file on file delete fix
* 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work
* 2023-10-30: Netstreamdriver: deallocate certificate related resources
* 2023-10-20: TLS subsystem: add remote hostname to error reporting
* 2023-10-21: Fix forking issue do to close_range call
* 2023-10-23: replace debian sample systemd service file by readme
* 2023-10-20: testbench: bump zookeeper version to match current offering
* 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie
* 2023-10-20: Only keep a single rsyslog.service for Debian
* 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch
* 2023-10-18: use logind instead of utmp for wall messages with systemd - replaces 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* 2023-10-11: Typo fixes
* 2023-10-11: Drop CAP_IPC_LOCK capability
* 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module
* 2023-10-03: Add new global config option \"libcapng.enable\"
* 2023-10-02: tcp net subsystem: handle data race gracefully
* 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler
* 2023-09-26: fix startup issue on modern systemd systems
* 2023-09-14: Fix misspeling in message.
* 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported
* 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set
* 2023-08-02: testbench: cleanup and improve some more imfile tests
* 2023-08-02: lookup tables: fix static analyzer issue
* 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded
* 2023-07-28: CI: fix and cleaup github workflow
* 2023-03-07: imjournal: Support input module
* 2023-07-28: testbench: make test more reliable
* 2023-07-28: tcpflood: add -A option to NOT abort when sending fails
* 2023-07-28: tcpflood: fix today\'s programming error
* 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method
* 2023-07-27: testbench improvement: define state file directories for imfile tests
* 2023-07-28: testbench: cleanup a test and some nitfixes to it
* 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly
* 2023-07-26: testbench: make waiting for HUP processing more reliable
* 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured
* 2023-07-25: CI: update zookeper download to newer version
* 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions
* 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years.
* 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+
* 2022-05-13: omazureeventhubs: Initial implementation of new output module
* 2023-07-03: TLS CRL Support Issue 5081
* 2023-06-29: action.resumeintervalmax: the parameter was not respected
* 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0
* 2023-05-15: Add the \'batchsize\' parameter to imhiredis
* 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167)
* 2023-06-22: Do not try to drop capabilities when we don\'t have any
* 2023-06-22: testbench: use newer zookeeper version in tests
* 2023-06-22: build system: more precise error message on too-old lib
* 2023-05-17: Fix quoting for omprog, improg, mmexternal
* Thu Mar 14 2024 dimstarAATTopensuse.org- Fix rpmlint warnings and errors: + rsyslog.spec:590: W: %autopatch-not-in-prep: - applying patches should be done in prep section and in this case, there is no reason not to do it. Use the opportunity to switch to %autosetup. - Do not BuildRequire libtool, autoconf, automake and don\'t run autoreconf: the comment indicates this would be needed for patch1, but likely for an \'older patch1\': what we have now does not touch the build system. + E: superfluous-%clean-section: Drop long deprecated %clean section. + E: suse-zypp-otherproviders otherproviders(syslog): simply provide syslog. + W: non-etc-or-var-file-marked-as-conffile: do not mark files in /usr/share as config; admins are not supposed to change them. + rsyslog-doc.x86_64: E: no-binary: build rsyslog-doc as noarch. + E: explicit-lib-dependency librdkafka1: the dependency for one should be in module-kafka, but then is also auto-detected by RPM.
* Thu Jan 18 2024 thomas.blumeAATTsuse.com- suppress installation errors when systemd is not running (bsc#1218799)
* Wed Oct 25 2023 thomas.blumeAATTsuse.com- use logind instead of utmp for wall messages with systemd Future SUSE versions will get rid of utmp due to a 32bit time_t counter overflow in 2038. See details at: https://github.com/thkukuk/utmpx/blob/main/Y2038.md On systemd based systems logind is an alternative to utmp.
* add: 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch
* Tue Sep 05 2023 thomas.blumeAATTsuse.com- trigger daemon restart after modules packages have been updated (bsc#1214996)
* Tue Jul 04 2023 thomas.blumeAATTsuse.com- Upgrade to rsyslog 8.2306.0
* 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped
* 2023-06-08: Add new global config option \"libcapng.default\"
* 2023-06-08: imjournal: Add FileCreateMode module parameter
* 2023-04-17: core bugfix: potential segfault on busy systems
* 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred
* 2023-05-24: CI: update base ubuntu image for github actions
* 2023-05-16: OMHIREDIS::ADDED:: New support for \'stream\' mode
* 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities
* 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure
* 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate
* 2023-04-25: IMHIREDIS::ADDED:: New support for \'stream\' mode
* 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module
* 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set \'key\' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies\' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode\'s value in logs when set incorrectly
* 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo
* 2023-03-21: modify testbench test to detect wrong imptcp truncation
* 2023-03-21: imptcp bugfix: spam log on oversize message
* 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown
* 2023-03-13: Remove halted LGTM badges on README
* 2023-02-16: Do not preserve capabilities when changing credentials
* 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset
* 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well
* 2023-01-18: core/template: implement negative position.to
* 2023-01-18: CI: fix github CodeQL settings
* 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped
* 2023-01-17: Adjust the capability set
* 2023-01-13: substring function: enhancement and hardening
* 2023-01-11: omfile: add action parameters \"rotation.
*\"
* 2023-01-11: CI: use newer version of zookeeper
* 2023-01-09: ffaup fix : memory corruption with concurrent workers
* 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback
* 2022-12-30: testbench: add test for invalid json template generation
* 2022-12-30: core bugfix: template system may generate invalid json
* 2022-12-28: Fixed wrong type conversion in cstrLen()
* 2022-12-08: Add CodeQL workflow for GitHub code scanning
* Tue Dec 27 2022 lnusselAATTsuse.com- Replace transitional %usrmerged macro with regular version check (boo#1206798)
* Tue Dec 06 2022 michaelAATTstroeder.com- Upgrade to rsyslog 8.2212.0
* 2022-12-05: testbench: make python http server based tests more reliable
* 2022-12-05: omprog bugfix: invalid status handling at called program startup
* 2022-11-29: testbench bugfix: wrong message injection object of instance 1
* 2022-11-21: rsyslog.conf man page bugfix: description of selectors
* 2022-11-18: imtcp bugfix: legacy config directives did no longer work
* 2022-11-16: ksi bugfix: sending of too many signing requests fixed.
* 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode
* 2022-11-02: imjournal: add second fallback to _COMM
* 2022-10-25: core bugfix: local hostname invalid if no global() config object given
* 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure
* Tue Oct 18 2022 michaelAATTstroeder.com- Upgrade to rsyslog 8.2210.0
* 2022-10-13: fix NetBSD build issue
* 2022-10-12: omrabbitmq: Add TLS support
* 2022-09-14: config: add \"abortOnFailedQueueStartup\" global config parameter
* 2022-09-07: cor bugfix: leak in helper function SetString
* 2022-09-07: core bugfix: correct local host name after config processing
* 2022-08-31: imtcp: add option notifyonconnectionopen
* 2022-08-26: openssl TLS driver: add mechanism to include extra CA files parameter
* 2022-08-19: fix compile issue with older gcc compilers
* Tue Aug 09 2022 michaelAATTstroeder.com- added libzstd-devel as build dependency- Upgrade to rsyslog 8.2208.0
* 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed.
* 2022-08-09: imjournal bugfix: segmentation fault in close journal
* 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode=\"x509/fingerprint\"
* 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated
* 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays.
* 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened.
* 2022-08-04: openssl: add support to split tls commands by semicolon
* 2022-08-04: openssl subsystem bugfix: build issue on Solaris
* 2022-08-04: openssl: add more details to error messages
* 2022-08-04: omclickhouse: capture additional exceptions
* 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection.
* 2022-07-21: imptcp: slight tuning
* 2022-07-20: template procesing/json: performance optimization
* 2022-07-19: core bugfix: memory leak when free action worker data table
* 2022-07-13: omfile: support for zstd compression
* 2022-07-07: stream cleanup: move error message to debug log, only
* 2022-07-04: mmdblookup bugfix: Don\'t crash Rsyslog on mmdb file errors
* 2022-06-28: build error fix: libbson requires out-of-date language constructs
* 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x
* Tue Jun 14 2022 michaelAATTstroeder.com- Upgrade to rsyslog 8.2206.0
* 2022-05-25: omelastisearch: allow omitting _type field
* 2022-05-18: tcpsrv/imtcp: slight performance improvements
* 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic
* 2022-05-11: omelasticsearch: several support option for ElasticSearch 8 - config params searchIndex and documentType can be empty - support for Data Stream API - new config param esVersion.major
* 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions
* 2022-05-05: net bugfix: potential buffer overrun fixes CVE-2022-24903 Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243
* 2022-05-05: imptcp: set OS worker thread name
* 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized
* 2022-04-22: mmdblookup fix: wrong copy of buffer
* 2022-04-22: mmdblookup: several enhancements - support arrays in MMDB entry - support escaped quotes \'\"\' in MMDB entry - support \'<\' characters in MMDB entry, when in a field - support \'}\' characters in MMDB entry, when in a field
* Sun May 08 2022 andreas.stiegerAATTgmx.de- rsyslog 8.2204.1:
* CVE-2022-24903: potential buffer overrun in imptcp, imtcp, imgssapi and others (boo#1199061)
* Tue Apr 19 2022 michaelAATTstroeder.com- Upgrade to rsyslog 8.2204.0
* 2022-04-18: gnutls bugfix: possibility of infinite loop
* 2022-04-17: core/bugfix: errorfile could grow over max configures size
* 2022-04-17: omkafka bugfix: potential misadressing
* 2022-04-06: added new \"FullJSONFmt\" standard template (with addtl fields)
* 2022-04-04: imfile: potential processing delay
* 2022-04-04: bugfix: cosmetic data races
* 2022-04-01: add property options to support ISO week/year number
* 2022-04-01: core bugfix: \"action suspended\" message was emitted even when turned off
* 2022-03-31: testbench: add more tests for rscript comparison operations
* 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker
* 2022-03-20: refactor: Move the parser directive to the main config
* 2022-03-16: refactor: ake the main message queue part of the config
* regression bugfix: rsyslog may segfault during startup
* regression fix: script string comparison did not work correctly
* Mon Mar 14 2022 thomas.blumeAATTsuse.com- remove invalid dependencies from systemd service unit (bsc#1196795, bsc#1196359)
* Tue Feb 15 2022 michaelAATTstroeder.com- Upgrade to rsyslog 8.2202.0
* 2022-02-14: imfile bugfix: remove cause for \"internal error message\" (not causing harm)
* 2022-02-04: rscript bugfix: literal numbers were not compared correctly
* 2022-02-04: omelasticsearch bugfix: indexSuccess impstats counter in bulkmode wrong
* 2022-01-17: imkmsg bugfix: effectively disabled input on error reading kmsg
* 2022-01-17: imtcp bugfix: worker threads were not properly terminated
* 2022-01-07: omlibdbi bugfix: use-after-free bug
* 2022-01-06: omhttp bugfix: memory leak in lokirest batchmode
* Wed Jan 19 2022 thomas.blumeAATTsuse.com- add service dependencies for remote logging (bsc#1194669)- update config example in remote.conf to match upstream documentation
* Thu Dec 16 2021 michaelAATTstroeder.com- Upgrade to rsyslog 8.2112.0
* 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor
* 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime
* 2021-11-22: new contribtion: URL parser module function using libfa
* 2021-11-18: mmanon: relax IPv6 detection - improve anonymization
* 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named
* 2021-11-10: omsnmp: update module to current IP best practices
* 2021-10-27: ommysql: fix threading bug
* 2021-10-25: testbench: false positive when impstats was not built
* 2021-10-25: imtcp: add support for permittedPeers setting at input() level
* Thu Oct 21 2021 thomas.blumeAATTsuse.com- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833)
* this legacy setting from pre-systemd times is obsolete
* Wed Oct 20 2021 michaelAATTstroeder.com- Upgrade to rsyslog 8.2110.0:
* 2021-10-13: config bugfix: global(security.abortonidresolutionfail=) did not work when used with rscript based configuration, it was not checked.
* 2021-10-13: config bugfix: global param $privDropToUser did not work correctly The parameter was not implemented for rscript based configuration and did not properly apply to legacy configuration. In essence, it almost always did not work as expected. see also: https://github.com/rsyslog/rsyslog/issues/4642 see also: https://github.com/rsyslog/rsyslog/commit/cbcaf2c7e5b67e5465e47bc7cc67af2eae47bd31
* 2021-10-12: rscript bugfix: ruleset called async when ruleset had queue.type=\"direct\" The call rscript statement is able to call a rule set either synchronously or asynchronously. We did this, because practice showed that both modes are needed. For various reasons we decided to make async calls if the ruleset has a queue assigned and sync if not. To know if a \"queue is assigned\" we just checked if queue parameters were given. It was overlookeded the case of someone explicitly specifying a \"direct queue\", aka \"no queue\". As such, queue=\"direct\" triggered async calls. That in turn meant that when a write operation to a variable was made inside that rule set, other rulesets could or could not see the write. While if was often not seen, this was a data race where the change could also be seen by the outside. This is now fixed. No matter if queue.type=\"direct\" is specified or left out, the call will always by synchronous. Any values written to variables will also be seen by the \"outside world\" in later processing stages. Note that this has some potential to BREAK EXISTING CONFIGURATIONS. We deem this acceptable because: 1. this was racy at all, so unexpected behaviour could alwas occur 2. it is actually unlikely that someone used the triggering conditions in practice. But we can not outrule this, especially when the configuration was auto-generated. Potential compatibility issues can be solved by defining a small array-memory queue on the ruleset in question instead of specifying direct type. Again, we expect that almost all users will never experience any problems. If you do, however, please let us know: we may add an option to re-enable the bug.
* 2021-10-12: ksi bugfix: locking bug fixed in rsksiCtxOpenFile Thanks to Taavi Valjaots for the patch.
* 2021-10-11: core bugfix: fix typo in error message Thanks to github user jkschulz for the patch.
* 2021-10-11: tcpsrv bugfix: compilation without exceptions tcpsrv.c:992:1: error: label at end of compound statement finalize_it: ^~~~~~~~~~~ Quoting from pthread.h: pthread_cleanup_push and pthread_cleanup_pop are macros and must always be used in matching pairs at the same nesting level of braces. Amends commit bcdd220142ec9eb106550195ba331fd114adb0bd. Thanks to Orgad Shaneh for the patch.
* 2021-10-11: mkubernetes bugfix: no connection retry to kubernetes APP When connection to the kubernates API was not possible, mmkubernetes did not retry. This does now happen via regular rsyslog retry mechanism. Thanks to github user jayme-github for the analysis and patch. closes https://github.com/rsyslog/rsyslog/issues/4669
* 2021-10-11: openssl bugfix: Correct gnutlsPriorityString (custom ciphers) behaviour
* Only apply default anon ciphers if gnutlsPriorityString is NULL and Authentication Mode is set to anon. Otherwise we do not set them as they overwrite custom Ciphers.
* Added two tests for custom cipher configuration (anon/certvalid mode).
* Add call for applyGnutlsPriorityString if gnutlsPriorityString changes.
* Merged openssl init code from Connect into osslInitSession closes: https://github.com/rsyslog/rsyslog/issues/4686
* 2021-10-11: build issue: handle undefined MAXPATHLEN, PATH_MAX While we handled missing PATH_MAX, we did not handle missing MAXPATHLEN. This happens under GNU/Hurd, because there is no official limit. However, extremely long pathes are extremely uncommon, so we do not want to use slow dynamic alloc each time we need to build pathes. So we impose a limit of 4KiB, which should be fairly enough. Note that this obviously increases stack requirements in GNU/Hurd. As suggested by Michael Biebl, we have now implemented a generic approach to handle this via autoconf.
* 2021-09-12: openssl: extended output information on connection failure Now includes the remote client/server IP address in the log output.
* 2021-09-12: imhttp enhancements - query parameter ingestion & basic auth support
* Basic Authentication support & tests
* configured via imhttp option \"basicAuthFile\". This option should be configured to point to your htpasswd file generated via a standard htpasswd tool. tests:
* imhttp-post-payload-basic-auth.sh
* imhttp-post-payload-basic-auth-vg.sh
* Query parameter ingestion capability & tests use t `addmetadata` option to inject query parameters into metadata for imhttp input. DISTRO PACKAGERS BEWARE: NEW DEPENDENCY FOR IMHTTP: libaprutil (libaprutil1-dev on debian\'ish, apr-util-devel on Red Hat) Thanks to Nelson Yen for the patch.
* 2021-09-07: testbench bugfix: privdrop tests under root user did not work When running under root, the privdrop tests did not properly work. This patch fixes the issue and skips test where necessary. This also includes some modernization of the related tests. closes https://github.com/rsyslog/rsyslog/issues/4619
* 2021-09-07: core/ratelimiting: fix rate limiting for already parsed messages Rate limiting may not have worked if the considered message had already been parsed (not having NEEDS_PARSING in msgFlags). This affects also imuxsock in its default configuration (useSpecialParser=\"true\" and ratelimit.severity=\"1\")
* 2021-09-07: core bugfix: use of property $wday terminates string When $wday is used inside a template, all template parts after it are ignored. For exmaple: template(name=\"json_filename\" type=\"string\" string=\"/var/log/%$wday%.log\") would generate something like \"/var/log/0\" - the \".log\" part would be missing. For the same reason, $wday can not reliably checked in script filters. Thanks to Alain Thivillon for reporting the bug and providing an excellent analysis, which essentiellay was exactly this fix here. closes https://github.com/rsyslog/rsyslog/issues/4670
* 2021-09-07: core/queue bugfix: potential misadressing when queue discarded messages When a discard mark was set, the queue was very busy and discarded messages, a NULL pointer access could happen. Depending on circumstances, several problems could occur, including a SEGFAULT. This is now fixed. closes: https://github.com/rsyslog/rsyslog/issues/4437
* 2021-09-07: imdiga bugfix: iOverallQueueSize calculation could be incorrect This issue only affects testbench and rsyslog development debugging. The active messages counter, used for synchronizing test steps, went wrong when the queue discarded messages on it\'s consumer thread. Now fixed.
* 2021-09-06: gnutls driver: SAN priority did not work correctly on server side PrioritizeSAN was not propagated when accepting a new connection, this is now fixed. Thanks to Attila Lakatos for the patch.
* 2021-08-24: config: implement script-equavalent for $PrivDrop
* statements closes https://github.com/rsyslog/rsyslog/issues/891
* Wed Aug 18 2021 michaelAATTstroeder.com- Upgrade to rsyslog 8.2108.0:
* 2021-08-16: openssl tls: Improved error message output on tls failures. closes: https://github.com/rsyslog/rsyslog/issues/4645
* 2021-08-16: impstats: add percentile metrics tracking functionality Brief overview: TO configure tracking percentile metrics in rainerscript: User would need to define: - which percentile to track, such as [p50, p99, etc.] - window size - note, this correlates directly with memory usage to track the percentiles. To track a value, user would call built-in function `percentile_observe()` in their configurations to record an integer value, and percentile metrics would be emitted every impstats interval. Thanks to Nelson Yen for the patch.
* 2021-08-12: imfile: add parameter \"ignoreolderthanoption\" instructs imfile not to ingest a file that has not been modified in the specified number of seconds. Thanks to github user yanjunli76 for the patch (submitted from Nelson Yen)
* 2021-08-10: imklog bugfix: invalid memory adressing, could cause abort This is a regeression from commit 94c4a87. It introduced a free() call using an object that was no longer valid (the main pointer to the to-be-freed object) was already freed at time of use. This could cause various issues, including a segfault. Note: this bug was triggerred only during late phase of rsyslog shutdown, so it did not affect regular operation. Special thanks to github user wxiaoguang for analyzing the issue and providing a draft fix proposal, on which this patch builds. see also https://github.com/rsyslog/rsyslog/pull/4629 closes https://github.com/rsyslog/rsyslog/issues/4625
* 2021-08-09: imfile bugfix: deleteStateOnFileDelete missed some state files When the log file is deleted, imfile would attempt to delete the statefile but it was missing the file_id part of the statefile name. This means the statefiles were only removed in the log file was less than 512 characters, because for very small files the file ID hash is not created. This lead to some state files not being deleted. Thanks to pearseimperva for the patch.
* 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 If imfile is ingesting log files with readMode set to 2 or 1, the resulting messages all have a \'#\' character at the end. This patch corrects the behaviour. Note: if some external script \"supported\" the bug of extra hash character at the end of line, it may be necessary to update them. closes https://github.com/rsyslog/rsyslog/issues/4491
* 2021-08-09: omelasticsearch bugfix: errorFile mutex was not consistently locked Lock the file during SIGHUPs to avoid issues with concurrent accesses by writeDataError(). Thanks to François Poirotte for the patch.
* 2021-08-09: imudp: add socket type (IPv4 vs. 6) to input name Most importantly, the input name is used for stats counter names as well. Previously, the same name was used for IPv4 and IPv6, so we had two counters with an equal name. That left users puzzled. Unfortunately, this change can potentially require changes to existing analysis scripts, as the name is now slightly different. closes https://github.com/rsyslog/rsyslog/issues/4364
* 2021-08-06: omfwd: add capability for action-specific TLS certificate settings This permits to override the global definitions for TLS certificates at the action() level.
* 2021-08-06: imfile bugfix: file handle leak if \"freshStartTail\" was turned on
* 2021-08-05: imtcp: permit to use different certificate files per input/action This completes the ability to override global/default TLS settings at the imtcp input() level. Support for using multiple CAs/Certs per Connection is now provided.
* 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set The interval was accidentally set to keep alive interval. This has been corrected. closes https://github.com/rsyslog/rsyslog/issues/4609
* 2021-07-08: openssl network driver bugfix: small memory leak Fixes a static, non-growing memory leak which existed when parameter \"GnutTLSPriorityString\" was used. This was primarily a cosmetic issue, but caused some grief during development in regard to memory leak detectors. Note: yes, this is for openssl -- the parameter name is historical.
* 2021-07-07: psrv bugfix: abort if no listener could be started Modules (like imtcp and imdiag) which use tcpsrv could abort or otherwise malfunction if no listener for a specific input could be started. Found during implementing a new feature, no report from practice. But could very well happen.
* 2021-07-07: mmkubernetes bugfix: apiserver error handling - Added graceful handling of apiserver errors with unexpected responses, i.e., anything other than 200, 404, or 429. Idea is that apiserver transient error state will recover. We don\'t want mmkubernetes to miss metadata resolution for containers that don\'t have cached metadata. During these transient error states, mmkubernetes will provide basic container file path based resolution of namespace and pod metadata for new pods whose metadata is not yet cached. After this error state recovers, mmkubernetes is expected to resume its metadata resolution as expected. - Added a unit test case for apiserver return 500 with changes to mock server - Fixed existing unit test that was failing due to missing expected results file - Added mmkubernetes unit tests to testbench Thanks to Abdul Waheed for the patch (submitted from Nelson Yen).
* 2021-07-07: ommongodb bugfixes - Fix Segmentation fault when server is down - Add server connexion check while resuming Thanks to Kevin Guillemot for the patch.
* 2021-06-28: omkafka improvements - drain librdkafka queues and retry later during rsyslog restart or hup. This re-injects messages into rsyslog\'s native queues. - add statsname on per kafka instance for better visibility - omkafka - count errors related ssl as \"errors_ssl\" Thanks to Nelson Yen for the patch.
* 2021-06-23: some CI/QA improvements, Travis-CI disabled For the time being, Travis CI is disabled because it was outdated and Travis also changed their system. We will re-evaluate if we re-enable it. Since quite a while the Travits tests were redundant with the rest of CI, so this does not reduce coverage.
* 2021-06-23: omhttp bugfix: dynrestpath param in batch mode invalid When batchmode was used, the templates could not be used to expand dynrestpath. We are now storing the restpath param within the batch data if we are in batch mode. When we are in batch mode, and the restpath value changes, the batch is submitted and reinitialized closes: https://github.com/rsyslog/rsyslog/issues/4567
* 2021-06-17: add predefined template RSYSLOG_SyslogRFC5424Format This is essentially the same as RSYSLOG_SyslogProtocol23Format with a better name and a fix to remove the unnecessary LF at the end of the message. The different name also enables us to fix the LF issue without any concern about backwards compatibility. closes https://github.com/rsyslog/rsyslog/issues/4384
* 2021-06-17: impstats/bugfix: _sender_stats reports integer counter as string Note that this introduces a small backwards incompatibility: in previous output the field was of string type, now it is integer (as intended). We discussed this on the mailing list and the overwhelming thought was that this is not a problem because almost all analysis backends are able to cover that format change. This made the bugfix essentially costmetic. HOWEVER, if you still experience issues, please let us know. We can add an option to provide the previous format, and just spared to do so because there was no evidence it was needed.
* Tue Jun 15 2021 michaelAATTstroeder.com- Upgrade to rsyslog 8.2106.0:
* NOTE: the prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step.
* 2021-06-14: new global option \"parser.supportCompressionExtension\" This permits to turn off rsyslog\'s single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598
* 2021-05-12: imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification.
* 2021-05-06: imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. closes https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-29: imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. see also: https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules.
* 2021-04-22: refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future.
* 2021-04-22: config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. closes https://github.com/rsyslog/rsyslog/issues/4429
* Tue Apr 20 2021 michaelAATTstroeder.com- Upgrade to rsyslog 8.2104.0:
* rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490)
* new contributed module imhiredis
* new built-in function get_property() to access property vars
* mmdblookup: add support for mmdb DB reload on HUP
* script bugfix: empty array in foreach() improperly handled
* imjournal bugfixes (handle leak, empty file)
* new contributed function module fmunflatten
* test bugfix: some tests did not work with newer TLS library versions
* some improvements to project CI
* Fri Feb 26 2021 thomas.blumeAATTsuse.com- update remote.conf example file to new \'Address\' and \'Port\' notation (bsc#1182653)
* Tue Feb 16 2021 michaelAATTstroeder.com- HTTPS URLs used for source- Upgrade to rsyslog 8.2102.0:
* omfwd: add stats counter for sent bytes
* omfwd: add error reporting configuration option
* action stats counter bugfix: failure count was not properly incremented
* action stats counter bugfix: resume count was not incremented
* omfwd bugfix: segfault or error if port not given
* lookup table bugfix: data race on lookup table reload
* testbench modernization
* testbench: fix invalid sequence of kafka tests runs
* testbench: fix kafkacat issues
* testbench: fix year-dependendt clickhouse test
* Tue Dec 08 2020 michaelAATTstroeder.com- Upgrade to rsyslog 8.2012.0:
* testbench bugfix: some tests did not work in make distcheck
* immark: rewrite with many improvements
* usability: re-phrase error message to help users better understand cause
* add new system property $now-unixtimestamp
* omfwd: add new rate limit option
* omfwd bug: param \"StreamDriver.PermitExpiredCerts\" is not \"off\" by default
* Thu Nov 26 2020 lnusselAATTsuse.de- prepare usrmerge (boo#1029961)
* Mon Nov 09 2020 thomas.blumeAATTsuse.com- fix location and naming of journald dropin (bsc#1178288)
* Wed Oct 28 2020 thomas.blumeAATTsuse.com- remove legacy stuff from specfile
* sysvinit is not supported anymore, so remove all tests related to systemv in the specfile
* Tue Oct 20 2020 michaelAATTstroeder.com- Upgrade to rsyslog 8.2010.0:
* gnutls TLS subsystem bugfix: handshake error handling
* core/msg bugfix: memory leak
* core/msg bugfix: segfault in jsonPathFindNext() when not an object
* openssl TLS subsystem: improvments of error and status messages
* add \'exists()\' script function to check if variable exists
* core bugfix: do not create empty JSON objects on non-existent key access
* gnutls subsysem bugfix: potential hang on session closure
* core/network bugfix: obey net.enableDNS=off when querying local hostname
* core bugfix: potential segfault on query of PROGRAMNAME property
* imtcp bugfix: broken connection not necessariy detected
* new module: imhttp - http input
* mmdarwin bugfix: potential zero uuid when reusing existing one
* imdocker bugfix: build issue on some platforms
* omudpspoof bugfix: make compatbile with Solaris build
* testbench fix: python 3 incompatibility
* core bugfix: segfault if disk-queue file cannot be created
* cosmetic: fix dummy module name in debug output
* config bugfix: intended warning emitted as error
* Sat Aug 29 2020 michaelAATTstroeder.com- Upgrade to rsyslog 8.2008.0 Way too many changes since 8.39.0 to be listed here.- Added custom unit file rsyslog.service because systemd service file was removed from upstream project- Removed obsolete patches:
* 0001-satisfy-gcc-flag-fno-common.patch
* rsyslog-pgsql-pkg-config.patch
* rsyslog-unit.patch
* Sat Jul 11 2020 kukukAATTsuse.com- Use systemd_ordering instead of requiring to make rsyslog useable in containers.
* Wed Apr 15 2020 rjschweiAATTsuse.com- Fix the URL for bug reporting, should not point to novell.com (bsc#1173433)
* Thu Feb 06 2020 rtylerAATTbrokenco.de- Add support for omkafka which is now in Factory, and 15.x repos
* Thu Jan 09 2020 thomas.blumeAATTsuse.com- avoid build error with gcc flag -fno-common (bsc#1160414)
* add 0001-satisfy-gcc-flag-fno-common.patch
* Thu Jul 25 2019 matthias.gerstnerAATTsuse.com- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Tue Mar 05 2019 dimstarAATTopensuse.org- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the right libraries/directories for postgresql. According to pgsql upstream, pg_config must only be used to buildpgsql modules.
* Fri Feb 22 2019 Thomas.BlumeAATTsuse.com- set default permissions before include directives (bsc#1126233)
* Logfile open modes depend on position in the config file, see https://www.rsyslog.com/doc/rsconf1_filecreatemode.html
* Wed Nov 21 2018 egottholdAATTsuse.com- Upgrade to rsyslog 8.39.0
* imfile: improve truncation detection
* imjournal: work around journald excessive reloading behavior
* errmsg: remove no longer needed code
* queue bugfix: invalid error message on queue startup
* bugfix imrelp: regression with legacy configuration startup fail
* bugfix imudp: stall of connection and/or potential segfault
* bugfix gcry crypto driver: small memleak
* fix potential misadressing in encryption subsystem
* ksi subsystem changes
* bugfix core: regex compile error messages could be incorrect
* bugfix core: potential hang on rsyslog termination
* bugfix imkafka: system hang when backgrounded
* bugfix imfile: file change was not reliably detected
* bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr
* bugfix queue subsystem: DA queue did ignore encryption settings
* bugfix KSI: lmsig-ksils12 module skips signing the last block
* bugfix fmhash: function hash64mod sometimes returned wrong result
* bugfix core/debug: data written to random fd 2 under some debug settings
* Tue Oct 16 2018 Thomas.BlumeAATTsuse.com- rsyslog configuration cleanup by filter rules in separate files (bug#1102720)
* add parsing of additional filter rules in /etc/rsyslog.d/
*.frule
* add acpid.frule, firewall.frule, NetworkManager.frule
* Wed Oct 10 2018 kukukAATTsuse.de- Enable ForwardToSyslog for journald to get syslog messages [bsc#1110456]
* Tue Sep 18 2018 michaelAATTstroeder.com- Update to rsyslog 8.38.0:
* imfile: support for endmsg.regex
* omhttp: new contribued module
* imrelp: add support for seting address to bind to (#894)
* ommysql: support mysql unix domain socket
* omusrmsg: do not fall back to max username length of 8
* various bug fixes and minor updates to other modules and core
* various fixes for memory leaks
* Thu Jul 19 2018 Thomas.BlumeAATTsuse.com- remove references to obsolete SYSLOG_REQUIRES_NETWORK variable (bsc#1101642)
* Wed Jun 27 2018 astiegerAATTsuse.com- rsyslog 8.36.0:
* Liblogging-stdlog deprecated
* OpenSSL based TLS driver added in addition to GnuTLS
* GnuTLS TLS driver: support intermediate certificates
* imptcp: add ability to configure socket backlog
* fmhash: new hash function module
* updates and fixes to various modules
* omfwd: add support for bind-to-address for UDP
* mmkubernetes: new module- updates and fixes to various modules
* Tue Jun 26 2018 Thomas.BlumeAATTsuse.com- fix CVE-2015-3243 rsyslog: some log files are created world-readable (bsc#935393)
* Sat Mar 24 2018 astiegerAATTsuse.com- rsyslog 8.33.1:
* devcontainer: use some more sensible defaults
* auto-detect if running inside a container (as pid 1)
* config: add include() script object
* template: add option to generate json \"container\"
* core/template: add format jsonf to constant template entries
* config: add ability to disable config parameter (\"config.enable\")
* script: permit to use environment variables during configuration
* new global config parameter \"shutdown.enable.ctlc\"
* config optimizer: detect totally empty \"if\" statements and optimize them out
* template: constant entry can now also be formatted as json field
* omstdout: support for new-style configuration parameters added
* core: set TZ on startup if not already set
* imjournal bugfix: file handle leak during journal rotation
* lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
* script bugfix: replace() function worked incorrectly in some cases
* core bugfix: misadressing in external command parser
* core bugfix: small memory leak in external command parser
* core bugfix: string not properly terminated when RFC5424 MSGID is used
* bugfix: strndup() compatibility layer func copies too much- the upstream systemd unit file was changed to no longer write the rsyslog pid, as it is no longer required for tracking under systemd (-iNONE). Adjust rsyslog-unit.patch to match.
* Mon Mar 19 2018 kukukAATTsuse.de- Use %license instead of %doc [bsc#1082318]
* Mon Feb 19 2018 Thomas.BlumeAATTsuse.com- fix includes for apparmor profile (bsc#1080238)
* Fri Jan 26 2018 astiegerAATTsuse.com- rsyslog 8.32.0
* libfastjson 0.99.8 required
* libczmq >= 3.0.2 is now required for omczmq
* libcurl is now needed for rsyslog core
* rsyslogd: add capability to specify that no pid file shall be written
* core improvements and bug fixes
* RainerScript improvements and bug fixes
* build fixes, including gcc7 fixes drop 0001-imgssapi-fix-compiler-warnings.patch
* various bug fixes in multiple modules
* Fri Jan 19 2018 rgerhardsAATTadiscon.com- remove build dependency on libee
* Thu Dec 07 2017 kukukAATTsuse.de- Disable news by default, we don\'t need to clobber all systems with this for the very few remaining news servers
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Fri Nov 17 2017 astiegerAATTsuse.com- Ensure user \"news\" exists - bsc#1068678
* Tue Nov 14 2017 astiegerAATTsuse.com- rsyslog 8.30.0
* changed behaviour: all variables are now case-insensitive by default
* core: handle (JSON) variables in case-insensitive way
* imjournal: made switching to persistent journal in runtime possible
* mmanon: complete refactor and enhancements
* imfile: add \"fileoffset\" metadata
* RainerScript: add ltrim and rtrim functions
* core: report module name when suspending action
* core: add ability to limit number of error messages going to stderr
* tcpsrv subsystem: improvate clarity of some error messages
* imptcp: include module name in error msg
* imtcp: include module name in error msg
* tls improvement: better error message if certificate file cannot be read
* omfwd: slightly improved error messages during config parsing
* ommysql improvements
* ommysql bugfix: do not duplicate entries on failed transaction
* imtcp bugfix: parameter priorityString was ignored
* template/bugfix: invalid template option conflict detection
* core/actions: fix handling of data-induced errors
* core/action bugfix: no \"action suspended\" message during retry processing
* core/ratelimit bugfix: race can lead to segfault
* core bugfix: rsyslog aborts if errmsg is generated in early startup
* core bugfix: informational messages was logged with error severity
* core bugfix: --enable-debugless build was broken
* queue bugfix: file write error message was incorrect
* omrelp bugfix: segfault when rebindinterval parameter is used
* omkafka bugfix: invalid load of failedmsg file on startup if disabled
* kafka bugfix: problem on invalid kafka configuration values
* imudp bugfix: UDP oversize message not properly handled
* core bugfix: memory corruption during configuration parsing
* core bugfix: race on worker thread termination during shutdown
* omelasticsearch: avoid ES5 warnings while sending json in bulkmode
* omelasticsearch bugfix: incompatibility with newer ElasticSearch version
* imptcp bugfix: invalid mutex addressing on some platforms
* imptcp bugfix: do not accept missing port in legacy listener definition- build requirements:
* libfastjson 0.99.7 is now mandatory
* libsystemd-journal >= 234 is now recommended- packaging:
* add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch
* Tue Aug 08 2017 astiegerAATTsuse.com- rsyslog 8.29.0:
* imptcp: add experimental parameter \"multiline\"
* imptcp: framing-related error messages now also indicate remote peer
* imtcp: framing-related error messages now also indicate remote peer
* imptcp: add session statistics conunter
* imtcp: add ability to specify GnuTLS priority string
* impstats: add new ressoure counter \"openfiles\"
* pmnormalize: new parser module
* core/queue: provide informational messages on thread startup and shutdown
* omfwd/udp: improve error reporting, depricate maxerrormessages parameter
* core: add parameters debug.file and debug.whitelist
* core/net.c: improve UDP socket creation error messages
* omfwd/udp: add \"udp.sendbuf\" parameter
* core: make rsyslog internal message rate-limiter configurable
* omelasticsearch bugfixes and changed ES5 API support + avoid 404 during health check + avoid ES5 warnings while sending json + bugfix for memomry leak while writing error file
* imfile bugfix: wildcard detection issue on path wildcards
* omfwd bugfix: always give reason for suspension
* omfwd bugfix: configured compression level was not properly used
* imptcp bugfix: potential socket leak on session shutdown
* omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
* imklog: fix permitnonkernelfacility not working
* impstats bugfix: impstats does not handle HUP
* core bugfix: segfault after configuration errors
* core/queue bugfixes
* lmsig_ksi: removed pre-KSI_LS12 components
* Sun Jul 30 2017 michaelAATTstroeder.comVersion 8.28.0 [v8-stable] 2017-06-27
* omfwd: add parameter \"tcp_frameDelimiter\"
* omkafka: large refactor of kafka subsystem
* imfile: improved handling of atomically renamed file (w/ wildcards)
* imfile: add capability to truncate oversize messages or split into multiple
* mmdblookup fixes and extensions
* bugfix: fixed multiple memory leaks
* imptcp: add new parameter \"flowControl\"
* imrelp: add \"maxDataSize\" config parameter
* multiple modules: gtls: improve error if certificate file can\'t be opened
* omsnare: allow different tab escapes
* omelasticsearch: converted to use libfastjson instead of json-c
* imjournal: _PID fallback
* added fallback for _PID proprety when SYSLOG_PID is not available
* introduced new option \"usepid\" which sets which property should rsyslog use, it has 3 states system|syslog|both, default is both
* deprecated \"usepidfromsystem\" option, still can be used and override the \"usepid\"
* it is possible to revert previous default with usepid=\"syslog\"
* multiple modules: add better error messages when regcomp is failing
* omhiredis: fix build warnings
* imfile bugfix: files mv-ed in into directory were not handled
* omprog bugfix: execve() incorrectly called
* imfile bugfix: multiline timeout did not work if state file exists
* lmsig_ksi-ls12 bugfix: build problems on some platforms
* core bugfix: invalid object type assertion
* regression fix: local hostname was not always detected properly...
* bugfix: format security issues in zmq3 modules (bsc#1051798)
* bugfix build system: add libksi only to those binaries that need it
* bugfix KSI ls12 components: invalid tree height calculation
* Mon Jun 05 2017 tchvatalAATTsuse.com- Drop module-guardtime package
* Upstream libgt died and it does not work with new openssl
* Thu May 18 2017 dziolkowskiAATTsuse.comVersion 8.27.0 [v8-stable] 2017-05-16- imkafka: add module- imptcp enhancements:
* optionally emit an error message if incoming messages are truncated
* optionally emit connection tracking message (on connection create and close)
* add \"maxFrameSize\" parameter to specify the maximum size permitted in octet-counted mode
* add parameter \"discardTruncatedMsg\" to permit truncation of oversize messages
* improve octect-counted mode detection: if the octet count is larger then the set frame size (or overly large in general), it is now assumed that octet-stuffing mode is used. This probably solves a number of issues seen in real deployments.- imtcp enhancements:
* add parameter \"discardTruncatedMsg\" to permit truncation of oversize messages
* add \"maxFrameSize\" parameter to specify the maximum size permitted in octet-counted mode- imfile bugfix: \"file not found error\" repeatedly being reported for configured non-existing file. In polling mode, this message appeared once in each polling cycle, causing a potentially very large amout of error messages. Note that they were usually emitted too infrequently to trigger the error message rate limiter, albeit often enough to be a major annoance.- imfile: in inotify mode, add error message if configured file cannot be found- imfile: add parameter \"fileNotFoundError\" to optinally disable \"file not found\" error messages- core: replaced gethostbyname() with getaddrinfo() call Gethostbyname() is generally considered obsolete, is not reentrant and cannot really work with IPv6. Changed the only place in rsyslog where this call remained. Thanks to github user jvymazal for the patch- omkafka: add \"origin\" field to stats output See also https://github.com/rsyslog/rsyslog/issues/1508 Thanks to Yury Bushmelev for providing the patch.- imuxsock: rate-limiting also uses process name both for the actual limit procesing as well as warning messages emitted see also https://github.com/rsyslog/rsyslog/pull/1520 Thanks to github user jvymazal for the patch- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)- rsylsog base functionality now builds on osx (Mac) Thanks to github user hdatma for his help in getting this done.- build now works on solaris again- imfile: fix cross-platform build issue see also https://github.com/rsyslog/rsyslog/issues/1494 Thanks to Felix Janda for bug report and solution suggestion.- bugfix core: segfault when no parser could parse message
* Thu Apr 06 2017 astiegerAATTsuse.com- rsyslog 8.26.0:
* liblognorm 2.0.3 is required for mmnormalize
* enable internal error messages at all times
* core: added logging name of source of rate-limited messages
* omfwd: omfwd: add support for network namespaces
* imrelp: honor input name if provided when submitting to impstats
* imptcp: add ability to set owner/group/access perms for uds
* mmnormalize: add ability to load a rulebase from action() parameter
* pmrfc3164 improvements + permit to ignore leading space in MSG + permit to use at-sign in host names + permit to require tag to end in colon
* add new global parameter \"umask\"
* core: make use of -T command line option more secure
* omfile: add error if both file and dynafile are set
* bugfix: build problem on MacOS (not a supported platform)
* regression fix: in 8.25, str2num() returned error on empty string
* bugfix omsnmp: improper handling of new-style configuration parameters
* bugfix: rsyslog identifies itself as \"liblogging-stdlog\" in internal messages
* bugfix imfile: wrong files were monitored when using multiple imfile inputs
* bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
* bugfix: immark emitted error messages with text \"imuxsock\"
* bugfix tcpflood: build failed if RELP was disabled
* fix gcc6 compiler warnings
* the output module array passing interface has been removed
* Mon Mar 06 2017 astiegerAATTsuse.com- use 8.25.0 documentation tarball
* Thu Feb 23 2017 astiegerAATTsuse.com- rsyslog 8.25.0:
* imfile: add support for wildcards in directory names
* add new global option \"parser.PermitSlashInProgramname\"
* mmdblookup: fix build issues, code cleanup
* improved debug output for queue corruption cases
* an error message is now displayed when a directory owner cannot be set
* rainerscript: add new function ipv42num
* rainerscript: add new function num2ipv4
* bugfix: ratelimiter does not work correctly is time is set back
* core: fix potential message loss in old-style transactional interface
* bugfix queue subsystem: queue corrupted if certain msg props are used
* bugfix imjournal: fixed situation when time goes backwards
* bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
* bugfix core: str2num mishandling empty strings
* bugfix rainerscript: set/unset statement do not check variable name validity
* bugfix mmrm1stspace: last character of rawmsg property was doubled
* bugfix imtcp: fix very small (cosmetic) memory leak
* However, the leak breaks memleak checks in the testbench.
* Fri Feb 10 2017 ndasAATTsuse.com- sync bug and fate numbers from IBS changes.
* Sun Jan 15 2017 astiegerAATTsuse.com- rsyslog 8.24.0(fate#320546):
* mmrm1stspace: new module; removes first space in MSG if present
* KSI signature provider: file permissions can now be specified
* omzmq: new features
* when the hostname is empty, we now use \"localhost-empty-hostname\"
* omelasticsearch: remove \"asyncrepl\" config parameter
* omfwd: Add support for bind-to-device (see below on same for imudp)
* imudp: Add support for bind-to-device
* imudp: limit rcvbufsize parameter to max 1GiB
* rainerscript: implement new \"call_indirect\" statement
* bugfix imjournal: make state file handling more robust
* bugfix core: lookup table reload was not properly integrated
* bugfix core: potential dealock on shutdown
* bugfix ommongodb: did not work in v8 due to invalid indirection
* bugfix ommongodb: fix tryResume handling
* bugfix omfwd: retry processing was not done correctly, could stall
* bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on- contributed modules not enabled due to build issues:
* mmdblookup: new maxminddb lookup message modify plugin
* Mon Dec 12 2016 dimstarAATTopensuse.org- Replace pkgconfig(libsystemd-journal) BuildRequires with pkgconfig(libsystemd): the sub-libraries have been merged into libsystemd since 209 and have ultimately been removed since 230.
* Sun Dec 04 2016 astiegerAATTsuse.com- rsyslog 8.23.0:
* requiring libfastjson 0.99.3
* KSI signatures: removed SHA2-224 hash algorithm
* imfile: new timeout feature for multi-line reads
* omfile: improve robustness against network file system failures
* pmaixforwardedfrom: support for AIX syslogd -s option
* omelasticsearch: add ability to specify max http request size
* omelasticsearch: high availability addressing of ElasticSearch cluster
* omelasticsearch: make compatible with ElasticSearch 2.x and 5.x
* omhiredis: add dynakey attribute.
* omtcl: new contributed module
* RainerScript: provide a capability to set environment variables
* lookup tables: improved error checking
* queue subsystem: add configuration parameter \"queue.samplinginterval\"
* various bug fixes
* rsgtutil: option to specify KSI publications file certificate constraints- includes changes from 8.22.0:
* ompgsql: add template support
* generate somewhat better error message on config file syntax error- includes changes from 8.21.0:
* CHANGE OF BEHAVIOUR: by default, internal messages are no longer logged via the internal bridge to rsyslog but via the syslog() API call [either directly or via liblogging). For the typical single-rsyslogd-instance installation this is mostly unnoticable (except for some additional latency). If multiple instances are run, only the \"main\" (the one processing system log messages) will see all messages. To return to the old behaviour, do either of those two: 1) add in rsyslog.conf: global(processInternalMessages=\"on\") 2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1 This will set a new default - the value can still be overwritten via rsyslog.conf (method 1). Note that the environment variable must be set in your
*
*startup script
*
*. For more information, please visit http://www.rsyslog.com/rsyslog-error-reporting-improved/
* slightly improved TLS syslog error messages
* queue subsystem: improved robustness
* Tue Jul 19 2016 astiegerAATTsuse.com- rsyslog 8.20.0:
* omrelp: add configurable connection timeout
* pmrfc3164: add support for slashes in hostname
* bugfix omfile: handle chown() failure correctly
* omfile now better conveys status of unwritable files back to core
* config files recursively including themselfes are now detected
* refactored code to not emit compiler warnings in \"strict mode\"
* bugfix: fix some issues with action CommitTransaction() handling
* bugfix omqmqp1: connecting to the message bus fails on nonstandard port
* testbench/CI enhancements- Build requirements:
* librelp 1.2.12
* Sat Jun 04 2016 astiegerAATTsuse.com- rsyslog 8.19.0:
* omelasticsearch: add option to permit unsigned certs
* imrelp: better error codes on unvailablity of TLS options
* default stack size for inputs has been explicitely set to 4MiB
* performance improvements
* miscellaneous minor cleanup
* fix: potential misadressing in template config processing
* bugfix omfile: async output file writing does not respect flushing
* bugfix imfile: corrupted multi-line message when state data was persisted
* bugfix imfile: missing newline after first line of multiline message
* bugfix: dynstats unusedMetricTtl bug
* bugfix build system: build was broken on SunOS
* bugfix: afterRun entry point not correctly called
* bugfix dynstats: do not leak file handles
* bugfix omelasticsearch: disable libCURL signal handling
* bugfix omelasticsearc: some regressions were fixed
* improved wording: gnutls error message points to potential cause
* Tue Apr 19 2016 astiegerAATTsuse.com- rsyslog 8.18.0(bnc#958728):
* templates: add option to convert timestamps to UTC
* omjournal: fix segfault (regression in 8.17.0)
* imptcp: added AF_UNIX support
* new template options
* compressSpace
* date-utc
* redis: support for authentication
* omkafka: makes kafka-producer on-HUP restart optional
* imfile: new \"FreshStartTail\" input parameter
* omjournal: fix libfastjson API issues
* ommongodb: fix json API issues
* dynamic stats subsystem: a couple of smaller changes
* foreach loop: now also iterates over objects (not just arrays)
* enhancement: queue subsystem is more robst in regard to some corruptions
* enhancement: Allow rsyslog to bind UDP ports even w/out specific interface being up at the moment.
* new External plugin for sending metrics to SPM Monitoring SaaS
* bugfix imfile: fix memory corruption bug when appending AATTcee
* bugfix: memory misallocation if position.from and position.to is used a negative amount of memory is tried to be allocated if position.from is smaller than the buffer size (at least with json variables). This usually leads to a segfault.
* bugfix: fix potential memleak in TCP allowed sender definition
* bugfix: $PrivDropToGroupID actually did a name lookup
* bugfix: small memory leak in imfile
* bugfix: double free in jsonmesg template
* bugfix: incorrect formatting of stats when CEE/Json format is used
* bugfix omfwd: new-style keepalive action parameters did not work due to being inconsistently spelled inside the code. Note that legacy parameters $keepalive... always worked
* bugfix: memory leaks in logctl utility
* bugfix omrelp: fix segfault if no port action parameter was given
* bugfix imtcp: Messages not terminated by a NL were discarded
* Sun Mar 13 2016 astiegerAATTsuse.com- rsyslog 8.17.0:
* improve json variable performance
* new experimental feature: lookup table suport
* new feature: dynamic statistics counters
* new contributed plugin: omampq1 for AMQP 1.0-compliant brokers
* new set of UTC-based $now family of variables ($now-utc, $year-utc, ...)
* simplified locking when accessing message and local variables
* new global parameter \"debug.unloadModules\"
* timestamp handling: guard against invalid dates
* imfile: add \"trimlineoverbytes\" input paramter
* ommongodb: add support for extended json format for dates
* omjournal: add support for templates
* imuxsock: add \"ruleset\" input parameter(fate#320667)
* imptcp: performance improvements
* improve interface definition in some modules, e.g. mmanon, mmsequence
* rsgtutil: dump mode improvements + auto-detect signature file type + ability to dump hash chains for log extraction files
* bugfix: unixtimestamp date format was incorrectly computed (leap year)
* bugfix: date-ordinal date format was incorrectly computed (leap year)
* bugfix: some race when shutting down input module threads
* bugfix tcpflood: did not handle connection drops correct in TLS case
* bugfix: abort if global parameter value was wrong
* bugfix omkafka: fix potential NULL pointer addressing
* bugfix impstats: AATTcee cookie was prefixed to wrong fromat (json vs. cee)
* bugfix imfile: fix race during startup that could lead to some duplication
* bugfix: potential loss of single message at queue shutdown
* bugfix: potential deadlock with heavy variable access
* bugfix ommysql: on some platforms, serverport parameter had no effect
* bugfix omelasticsearch: invalid pointer dereference
* bugfix omhiredis: serverport config parameter did not reliably work
* bugfix rsgtutil: -h command line option did not work
* bugfix lexer: hex numbers were not properly represented
* bugfix TLS syslog: intermittent errors while sending data
* bugfix imfile: abort on startup if no slash was present in file name param
* bugfix rsgtutil: fixed abort when using short command line options
* bugfix rsgtutil: invalid computation of log record extraction file
* bugfix build system: KSI components could only be build if in default path
* Mon Feb 01 2016 astiegerAATTsuse.com- rsyslog 8.16.0:
* rsgtutil: Added extraction support including loglines and hash chains.
* new system properties for $NOW properties based on UTC
* various bug fixes and improvements
* Thu Jan 28 2016 mrueckertAATTsuse.de- fix build on sle11: use package name buildrequires instead of pkgconfig
* Tue Jan 12 2016 astiegerAATTsuse.com- build with libfastjson (mandatory from 8.16.0)
* Sat Jan 02 2016 astiegerAATTsuse.com- rsyslog 8.15.0:
* KSI (incompatible changes): + KSI utilities: Added option to set publication url via - -publications-server. Required for signature verification. + UserID and UserKey can be set by parameter + Fixed wrong TLV container for KSI signatures from 0905 to 0906. + somewhat improved error messages + Update for and use libksi 3.4.0.x
* New contributed modules: + pmpanngfw: for translating Palo Alto Networks logs
* pmciscoios: support for asterisk before timestamp added
* solr external output plugin much enhanced
* omrabbitmq: improvements
* add support for libfastjson (as a replacement for json-c)
* pmciscoios: support for some format variations
* improvments for 0mq modules: + omczmq - suspend / Retry handling + omczmq - improved efficiency + omczmq - added ability to set a timeout for sends + omczmq - set topics can be in separate frame (default) or part of message frame (configurable) + imczmq - ZMQ_ROUTER support
* Note the upstream supported modules not enabled in SUSE package: + grok (mmgrok) + omkafka
* add support for building with libfastjson
* bugfix: invalid mutex handling in omfile async write mode could lead to segfault, even though highly unlikely (caught by testbench on a single platform) (bsc#1000488)
* Sat Nov 07 2015 astiegerAATTsuse.com- rsyslog 8.14.0:
* add property \"rawmsg-after-pri\"
* bugfix: potential misadresseing in imfile
* bugfix: re_extract RainerScript function did not work
* Thu Sep 24 2015 astiegerAATTsuse.com- rsyslog 8.13.0:
* ZeroMQ enhancements
* Redis enhancements
* mmnormalize: liblognorm error messages are now emitted via regular rsyslog error reporting mechanism (aka \"are now logged\")
* networking improvements- drop rsyslog-8.12.0-parallel-build.patch, is upstream- drop rsyslog-8.12.0-gnutls.patch, same
* Wed Aug 26 2015 astiegerAATTsuse.com- rsyslog 8.12.0:
* Harmonize resetConfigVariables values and defaults
* GT/KSI: fix some issues in signature file format and add conversion tool
* bugfix: ommysql did not work when gnutls was enabled
* bugfix omfile: potential memory leak on file close
* bugfix omfile: potential race in dynafile detection/creation
* bugfix omfile: Fix race-condition detection in path-creation code
* bugfix parser subsystem: potential misadressing in SanitizeMsg()
* imfile: files moved outside of directory are now (properly) handled
* bugfix: imfile: segfault when using startmsg.regex
* bugfix imfile: file table was corrupted when on file deletion
* bugfix ompgsql: transaction were improperly handled
* bugfix mmjsonparse: memory leak if non-cee-json message is processed
* testbench: remove raciness from UDP based tests
* testbench: added bash into all scripts makign it mandatory
* bugfix testbench: Fixed problem building syslog_caller util when liblogging-stdlog is not available.- add upstream patches:
* rsyslog-8.12.0-gnutls.patch to fix build with gnutls
* rsyslog-8.12.0-parallel-build.patch to fix parallel build
* Wed Jul 01 2015 astiegerAATTsuse.com- rsyslog 8.11.0- new features:
* signature provider for Keyless Signature Infrastructure (KSI)- bug fixes:
* imfile: regex multiline mode ignored escapeLF option
* omkafka: fixed several concurrency issues, most of them related to dynamic topics.
* execonlywhenpreviousissuspended did not work correctly
* core engine: ensured global variable atomicity
* imfile: segfault when using startmsg.regex because of empty log line
* Tue May 19 2015 astiegerAATTsuse.com- rsyslog 8.10.0:
* imfile: add capability to process multi-line messages based on regex
* pmrfc3164: add new parameter \"detect.yearAfterTimestamp\"
* pmrfc3164: add new parameter \"permit.squareBracesInHostname\"
* supplementary groups are now set when dropping privileges
* imfile: added brace glob expansion to wildcard
* zmq: add the ability for zeromq input and outputs to advertise their presence on UDP via the zbeacon API.
* added omhttpfs: contributed module for writing to HDFS via HTTP
* bug fixes- packaging changes:
* build with GnuTLS support again as 3.4.0 is now supported
* Thu Apr 30 2015 jengelhAATTinai.de- Documentation does not depend on the presence of anything
* Mon Apr 27 2015 jsegitzAATTnovell.com- Adjusted apparmor profile based on the suggestions by Christian Boltz
* Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls
* Moved profiles to /usr/share/apparmor/extra-profiles/
* Blocked capability block_suspend plus some other small fixes
* Mon Apr 20 2015 jsegitzAATTnovell.com- Adjusted apparmor profile to prevent aa-genprof failures (bnc#925512)
* Mon Apr 13 2015 astiegerAATTsuse.com- disable GnuTLS support, does not build with GnuTLS 3.4.0
* Tue Apr 07 2015 astiegerAATTsuse.com- rsyslog 8.9.0: - omprog: add option \"hup.forward\" to forwards HUP to external plugins - imuxsock: added capability to use regular parser chain - new sysSock.useSpecialParser module parameter - new sysSock.parseHostname module parameter - new useSpecialParser input parameter - new parseHostname input parameter - 0mq: improvements in input and output modules - imtcp: add support for ip based bind for imtcp -> param \"address\" - bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData - bugfix imfile: partial data loss, especially in readMode != 0 - bugfix: potential large memory consumption with failed actions - bugfix: omudpspoof: invalid default send template in RainerScript format - bugfix: size-based legacy config statements did not work properly on some platforms, they were incorrectly handled, resulting in all sorts of \"interesting\" effects (up to segfault on startup) - build system: added option --without-valgrind-testbench ... which provides the capability to either enforce or turn off valgrind use inside the testbench. Thanks to whissi for the patch. - rsyslogd: fix misleading typos in error messa- remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch
* Sun Mar 01 2015 astiegerAATTsuse.com- rsyslog 8.8.0: - omkafka: add support for dynamic topics and auto partitioning - imtcp/imptcp: support for broken Cisco ASA TCP syslog framing - omfwd: more detailled error messages in case of UDP send error - TLS syslog: enable capability to turn on GnuTLS debug logging - bugfix: $AbortOnUncleanConfig did not work - improve rsyslogd -v output and error message with meta information - bugfix imtcp: octet-counted framing cannot be turned off - bugfix: build problems on Illuminos - bugfix: invalid data size for iMaxLine global property - bugfix: negative values for maxMessageSize global parameter were permitted- add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch to fix compiler warnings/errors
* Fri Feb 13 2015 astiegerAATTsuse.com- rsyslog 8.7.0: - add message metadata \"system\" to msg object this permits to store metadata alongside the message - imfile: add support for \"filename\" metadata this is useful in cases where wildcards are used - imptcp: make stats counter names consistent with what imudp, imtcp uses - added new module \"omkafka\" to support writing to Apache Kafka - omfwd: add new \"udp.senddelay\" parameter - mmnormalize enhancements - RainerScript \"foreach\" iterator and array reading support Thanks to Janmejay Singh for the patch. - now requires liblognorm >= 1.0.2 - add support for systemd >= 209 library names - BSD \"ntp\" facility (value 12) is now also supported in filter Note: this patch was released under ASL 2.0 (see email-conversation). - bugfix: global(localHostName=\"xxx\") was not respected in all modules - bugfix: emit correct error message on config-file-not-found - bugfix: impstats emitted invalid JSON format (if JSON was selected) - bugfix: (small) memory leak in omfile\'s outchannel code - bugfix: imuxsock did not deactivate some code not supported by platform- includes changes from 8.6.0: - configuration-setting rsyslogd command line options deprecated - new and enhanced plugins for 0mq. These are currently experimantal. - empty rulesets have been permitted. They no longer raise a syntax error. - add parameter -N3 to enable config check of partial config file Use for config include files. Disables checking if any action exists at all. - rsyslogd -e option has finally been removed It is deprectated since many years. - testbench improvements - testbench is now by default disabled - add new RainerScript functions warp() and replace() - mmnormalize can now also work on a variable - new property date options for day ordinal and week number - remove --enable-zlib configure option, we always require it - slight source-tree restructuring: contributed modules are now in their own ./contrib directory. The idea is to make it clearer to the end user which plugins are supported by the rsyslog project (those in ./plugins). - bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used - bugfix: not all files closed on auto-backgrounding startup - bugfix: typo in queue configuration parameter - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imuxsock: possible segfault when SysSock.Use=\"off\" - bugfix: RainerScript: invalid ruleset names were accepted - bugfix: some module entry points were not called for all modules - bugfix omlibdbi: connection was taken down in wrong thread - imttcp was removed because it was an incompleted experimental module - pmrfc3164sd because it was a custom module nobody used - omoracle was removed because it was orphaned and did not build/work for quite some years and nobody was interested in fixing it- includes changes from 8.5.0: - imfile greatly refactored and support for wildcards added - PRI-handling code refactored for more clarity and robustness - ommail: add support for RainerScript config system [action() object] - refactored the auto-backgrounding method - make gntls tcp syslog driver emit more error messages - bugfix: imfile did not complain if configured file did not exist - bugfix: build failure on systems which don\'t have json_tokener_errors - imgssapi: log remote peer address in some error messages- includes changes from 8.4.3: - ommail: minor bugfixes & improvements - bugfix imkmsg: infinite loop on OpenVZ VMs - bugfix: typo in queue configuration parameter made parameter unusable - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imfile: segfault on startup in \"inotify\" mode - bugfix imfile: could make rsyslog exit in inotify mode - bugfix: rsgtutil sometimes crashed in verify mode if file did not exist - bugfix imklog: pri was miscalculated - bugfix: imjournal did not build properly - bugfix: mmcount did no longer build - bugfix imuxsock: possible segfault when SysSock.Use=\"off\"- rsyslog Version 8.5.0 fixed bsc#992146
* Thu Dec 04 2014 andreas.stiegerAATTgmx.de- set file permissions only on first install [boo#899316]
* Wed Oct 22 2014 heinemannj66AATTgmail.com- Changed BuildRequires dependencies for SLES11SP3 - BuildRequires: libjson-c-devel - BuildRequires: libestr-devel - BuildRequires: liblogging-devel - BuildRequires: librelp-devel - BuildRequires: libee-devel - BuildRequires: liblognorm-devel - BuildRequires: libuuid-devel
* Sat Oct 18 2014 ledestAATTgmail.com- fix shebang of rsyslog-service-prepare script