|
|
|
|
Changelog for rsyslog-module-ossl-8.2406.0-393.16.x86_64.rpm :
* Wed Jul 24 2024 Thomas Blume - Upgrade to rsyslog 8.2406.0-patches replaced by upgrade (see details in upgrade logs below) 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch * 2023-11-29: Revert \"Update omlibdbi.c\" * 2023-11-21: imkmsg: add params \"readMode\" and \"expectedBootCompleteSeconds\" * 2023-11-10: testbench: fix \"typo\" in test case * 2023-11-08: omazureeventhubs: Corrected handling of transport closed failures * 2023-10-31: imkmsg: add module param parseKernelTimestamp * 2023-11-03: imfile: remove state file on file delete fix * 2023-10-30: imklog bugfix: keepKernelTimestamp=off config param did not work * 2023-10-30: Netstreamdriver: deallocate certificate related resources * 2023-10-20: TLS subsystem: add remote hostname to error reporting * 2023-10-21: Fix forking issue do to close_range call * 2023-10-23: replace debian sample systemd service file by readme * 2023-10-20: testbench: bump zookeeper version to match current offering * 2023-10-20: Update rsyslog.service sample unit to the latest version used in Debian Trixie * 2023-10-20: Only keep a single rsyslog.service for Debian * 2023-10-20: Remove no longer used --with-systemdsystemunitdir configure switch * 2023-10-18: use logind instead of utmp for wall messages with systemd - replaces 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch * 2023-10-11: Typo fixes * 2023-10-11: Drop CAP_IPC_LOCK capability * 2023-10-04: Add CAP_NET_RAW capability due to the omudpspoof module * 2023-10-03: Add new global config option \"libcapng.enable\" * 2023-10-02: tcp net subsystem: handle data race gracefully * 2023-08-31: Avoid crash on restart in imrelp SIGTTIN handler * 2023-09-26: fix startup issue on modern systemd systems * 2023-09-14: Fix misspeling in message. * 2023-09-13: tcpflood bugfix: plain tcp send error not properly reported * 2023-09-12: omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set * 2023-08-02: testbench: cleanup and improve some more imfile tests * 2023-08-02: lookup tables: fix static analyzer issue * 2023-08-02: lookup tables bugfix: reload on HUP did not work when backgrounded * 2023-07-28: CI: fix and cleaup github workflow * 2023-03-07: imjournal: Support input module * 2023-07-28: testbench: make test more reliable * 2023-07-28: tcpflood: add -A option to NOT abort when sending fails * 2023-07-28: tcpflood: fix today\'s programming error * 2023-07-28: openssl: Replaced depreceated method SSLv23_method with TLS_method * 2023-07-27: testbench improvement: define state file directories for imfile tests * 2023-07-28: testbench: cleanup a test and some nitfixes to it * 2023-07-27: tcpflood bugfix: TCP sending was not implemented properly * 2023-07-26: testbench: make waiting for HUP processing more reliable * 2023-07-25: build system: make rsyslogd execute when --disable-inet is configured * 2023-07-25: CI: update zookeper download to newer version * 2023-07-10: ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions * 2023-07-11: ossl: Fix CRL File Expire from 1 day to 100 years. * 2023-07-06: PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+ * 2022-05-13: omazureeventhubs: Initial implementation of new output module * 2023-07-03: TLS CRL Support Issue 5081 * 2023-06-29: action.resumeintervalmax: the parameter was not respected * 2023-06-28: IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0 * 2023-05-15: Add the \'batchsize\' parameter to imhiredis * 2023-06-28: Clear undefined behavior in libgcry.c (GH #5167) * 2023-06-22: Do not try to drop capabilities when we don\'t have any * 2023-06-22: testbench: use newer zookeeper version in tests * 2023-06-22: build system: more precise error message on too-old lib * 2023-05-17: Fix quoting for omprog, improg, mmexternal * Thu Mar 14 2024 Dominique Leuenberger - Fix rpmlint warnings and errors: + rsyslog.spec:590: W: %autopatch-not-in-prep: - applying patches should be done in prep section and in this case, there is no reason not to do it. Use the opportunity to switch to %autosetup. - Do not BuildRequire libtool, autoconf, automake and don\'t run autoreconf: the comment indicates this would be needed for patch1, but likely for an \'older patch1\': what we have now does not touch the build system. + E: superfluous-%clean-section: Drop long deprecated %clean section. + E: suse-zypp-otherproviders otherproviders(syslog): simply provide syslog. + W: non-etc-or-var-file-marked-as-conffile: do not mark files in /usr/share as config; admins are not supposed to change them. + rsyslog-doc.x86_64: E: no-binary: build rsyslog-doc as noarch. + E: explicit-lib-dependency librdkafka1: the dependency for one should be in module-kafka, but then is also auto-detected by RPM. * Thu Jan 18 2024 Thomas Blume - suppress installation errors when systemd is not running (bsc#1218799) * Wed Oct 25 2023 Thomas Blume - use logind instead of utmp for wall messages with systemd Future SUSE versions will get rid of utmp due to a 32bit time_t counter overflow in 2038. See details at: https://github.com/thkukuk/utmpx/blob/main/Y2038.md On systemd based systems logind is an alternative to utmp. * add: 0001-use-logind-instead-of-utmp-for-wall-messages-with-sy.patch * Tue Sep 05 2023 Thomas Blume - trigger daemon restart after modules packages have been updated (bsc#1214996) * Tue Jul 04 2023 Thomas Blume - Upgrade to rsyslog 8.2306.0 * 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped * 2023-06-08: Add new global config option \"libcapng.default\" * 2023-06-08: imjournal: Add FileCreateMode module parameter * 2023-04-17: core bugfix: potential segfault on busy systems * 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred * 2023-05-24: CI: update base ubuntu image for github actions * 2023-05-16: OMHIREDIS::ADDED:: New support for \'stream\' mode * 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities * 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure * 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate * 2023-04-25: IMHIREDIS::ADDED:: New support for \'stream\' mode * 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module * 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set \'key\' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies\' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode\'s value in logs when set incorrectly * 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo * 2023-03-21: modify testbench test to detect wrong imptcp truncation * 2023-03-21: imptcp bugfix: spam log on oversize message * 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown * 2023-03-13: Remove halted LGTM badges on README * 2023-02-16: Do not preserve capabilities when changing credentials * 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset * 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well * 2023-01-18: core/template: implement negative position.to * 2023-01-18: CI: fix github CodeQL settings * 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped * 2023-01-17: Adjust the capability set * 2023-01-13: substring function: enhancement and hardening * 2023-01-11: omfile: add action parameters \"rotation. *\" * 2023-01-11: CI: use newer version of zookeeper * 2023-01-09: ffaup fix : memory corruption with concurrent workers * 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback * 2022-12-30: testbench: add test for invalid json template generation * 2022-12-30: core bugfix: template system may generate invalid json * 2022-12-28: Fixed wrong type conversion in cstrLen() * 2022-12-08: Add CodeQL workflow for GitHub code scanning * Tue Dec 27 2022 Ludwig Nussel - Replace transitional %usrmerged macro with regular version check (boo#1206798) * Tue Dec 06 2022 Michael Ströder - Upgrade to rsyslog 8.2212.0 * 2022-12-05: testbench: make python http server based tests more reliable * 2022-12-05: omprog bugfix: invalid status handling at called program startup * 2022-11-29: testbench bugfix: wrong message injection object of instance 1 * 2022-11-21: rsyslog.conf man page bugfix: description of selectors * 2022-11-18: imtcp bugfix: legacy config directives did no longer work * 2022-11-16: ksi bugfix: sending of too many signing requests fixed. * 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode * 2022-11-02: imjournal: add second fallback to _COMM * 2022-10-25: core bugfix: local hostname invalid if no global() config object given * 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure * Tue Oct 18 2022 Michael Ströder - Upgrade to rsyslog 8.2210.0 * 2022-10-13: fix NetBSD build issue * 2022-10-12: omrabbitmq: Add TLS support * 2022-09-14: config: add \"abortOnFailedQueueStartup\" global config parameter * 2022-09-07: cor bugfix: leak in helper function SetString * 2022-09-07: core bugfix: correct local host name after config processing * 2022-08-31: imtcp: add option notifyonconnectionopen * 2022-08-26: openssl TLS driver: add mechanism to include extra CA files parameter * 2022-08-19: fix compile issue with older gcc compilers * Tue Aug 09 2022 Michael Ströder - added libzstd-devel as build dependency- Upgrade to rsyslog 8.2208.0 * 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed. * 2022-08-09: imjournal bugfix: segmentation fault in close journal * 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode=\"x509/fingerprint\" * 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated * 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays. * 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened. * 2022-08-04: openssl: add support to split tls commands by semicolon * 2022-08-04: openssl subsystem bugfix: build issue on Solaris * 2022-08-04: openssl: add more details to error messages * 2022-08-04: omclickhouse: capture additional exceptions * 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection. * 2022-07-21: imptcp: slight tuning * 2022-07-20: template procesing/json: performance optimization * 2022-07-19: core bugfix: memory leak when free action worker data table * 2022-07-13: omfile: support for zstd compression * 2022-07-07: stream cleanup: move error message to debug log, only * 2022-07-04: mmdblookup bugfix: Don\'t crash Rsyslog on mmdb file errors * 2022-06-28: build error fix: libbson requires out-of-date language constructs * 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x * Tue Jun 14 2022 Michael Ströder - Upgrade to rsyslog 8.2206.0 * 2022-05-25: omelastisearch: allow omitting _type field * 2022-05-18: tcpsrv/imtcp: slight performance improvements * 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic * 2022-05-11: omelasticsearch: several support option for ElasticSearch 8 - config params searchIndex and documentType can be empty - support for Data Stream API - new config param esVersion.major * 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions * 2022-05-05: net bugfix: potential buffer overrun fixes CVE-2022-24903 Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243 * 2022-05-05: imptcp: set OS worker thread name * 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized * 2022-04-22: mmdblookup fix: wrong copy of buffer * 2022-04-22: mmdblookup: several enhancements - support arrays in MMDB entry - support escaped quotes \'\"\' in MMDB entry - support \'<\' characters in MMDB entry, when in a field - support \'}\' characters in MMDB entry, when in a field * Sun May 08 2022 Andreas Stieger - rsyslog 8.2204.1: * CVE-2022-24903: potential buffer overrun in imptcp, imtcp, imgssapi and others (boo#1199061) * Tue Apr 19 2022 Michael Ströder - Upgrade to rsyslog 8.2204.0 * 2022-04-18: gnutls bugfix: possibility of infinite loop * 2022-04-17: core/bugfix: errorfile could grow over max configures size * 2022-04-17: omkafka bugfix: potential misadressing * 2022-04-06: added new \"FullJSONFmt\" standard template (with addtl fields) * 2022-04-04: imfile: potential processing delay * 2022-04-04: bugfix: cosmetic data races * 2022-04-01: add property options to support ISO week/year number * 2022-04-01: core bugfix: \"action suspended\" message was emitted even when turned off * 2022-03-31: testbench: add more tests for rscript comparison operations * 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker * 2022-03-20: refactor: Move the parser directive to the main config * 2022-03-16: refactor: ake the main message queue part of the config * regression bugfix: rsyslog may segfault during startup * regression fix: script string comparison did not work correctly * Mon Mar 14 2022 Thomas Blume - remove invalid dependencies from systemd service unit (bsc#1196795, bsc#1196359) * Tue Feb 15 2022 Michael Ströder - Upgrade to rsyslog 8.2202.0 * 2022-02-14: imfile bugfix: remove cause for \"internal error message\" (not causing harm) * 2022-02-04: rscript bugfix: literal numbers were not compared correctly * 2022-02-04: omelasticsearch bugfix: indexSuccess impstats counter in bulkmode wrong * 2022-01-17: imkmsg bugfix: effectively disabled input on error reading kmsg * 2022-01-17: imtcp bugfix: worker threads were not properly terminated * 2022-01-07: omlibdbi bugfix: use-after-free bug * 2022-01-06: omhttp bugfix: memory leak in lokirest batchmode * Wed Jan 19 2022 Thomas Blume - add service dependencies for remote logging (bsc#1194669)- update config example in remote.conf to match upstream documentation * Thu Dec 16 2021 Michael Ströder - Upgrade to rsyslog 8.2112.0 * 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor * 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime * 2021-11-22: new contribtion: URL parser module function using libfa * 2021-11-18: mmanon: relax IPv6 detection - improve anonymization * 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named * 2021-11-10: omsnmp: update module to current IP best practices * 2021-10-27: ommysql: fix threading bug * 2021-10-25: testbench: false positive when impstats was not built * 2021-10-25: imtcp: add support for permittedPeers setting at input() level * Thu Oct 21 2021 Thomas Blume - remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833) * this legacy setting from pre-systemd times is obsolete * Wed Oct 20 2021 Michael Ströder - Upgrade to rsyslog 8.2110.0: * 2021-10-13: config bugfix: global(security.abortonidresolutionfail=) did not work when used with rscript based configuration, it was not checked. * 2021-10-13: config bugfix: global param $privDropToUser did not work correctly The parameter was not implemented for rscript based configuration and did not properly apply to legacy configuration. In essence, it almost always did not work as expected. see also: https://github.com/rsyslog/rsyslog/issues/4642 see also: https://github.com/rsyslog/rsyslog/commit/cbcaf2c7e5b67e5465e47bc7cc67af2eae47bd31 * 2021-10-12: rscript bugfix: ruleset called async when ruleset had queue.type=\"direct\" The call rscript statement is able to call a rule set either synchronously or asynchronously. We did this, because practice showed that both modes are needed. For various reasons we decided to make async calls if the ruleset has a queue assigned and sync if not. To know if a \"queue is assigned\" we just checked if queue parameters were given. It was overlookeded the case of someone explicitly specifying a \"direct queue\", aka \"no queue\". As such, queue=\"direct\" triggered async calls. That in turn meant that when a write operation to a variable was made inside that rule set, other rulesets could or could not see the write. While if was often not seen, this was a data race where the change could also be seen by the outside. This is now fixed. No matter if queue.type=\"direct\" is specified or left out, the call will always by synchronous. Any values written to variables will also be seen by the \"outside world\" in later processing stages. Note that this has some potential to BREAK EXISTING CONFIGURATIONS. We deem this acceptable because: 1. this was racy at all, so unexpected behaviour could alwas occur 2. it is actually unlikely that someone used the triggering conditions in practice. But we can not outrule this, especially when the configuration was auto-generated. Potential compatibility issues can be solved by defining a small array-memory queue on the ruleset in question instead of specifying direct type. Again, we expect that almost all users will never experience any problems. If you do, however, please let us know: we may add an option to re-enable the bug. * 2021-10-12: ksi bugfix: locking bug fixed in rsksiCtxOpenFile Thanks to Taavi Valjaots for the patch. * 2021-10-11: core bugfix: fix typo in error message Thanks to github user jkschulz for the patch. * 2021-10-11: tcpsrv bugfix: compilation without exceptions tcpsrv.c:992:1: error: label at end of compound statement finalize_it: ^~~~~~~~~~~ Quoting from pthread.h: pthread_cleanup_push and pthread_cleanup_pop are macros and must always be used in matching pairs at the same nesting level of braces. Amends commit bcdd220142ec9eb106550195ba331fd114adb0bd. Thanks to Orgad Shaneh for the patch. * 2021-10-11: mkubernetes bugfix: no connection retry to kubernetes APP When connection to the kubernates API was not possible, mmkubernetes did not retry. This does now happen via regular rsyslog retry mechanism. Thanks to github user jayme-github for the analysis and patch. closes https://github.com/rsyslog/rsyslog/issues/4669 * 2021-10-11: openssl bugfix: Correct gnutlsPriorityString (custom ciphers) behaviour * Only apply default anon ciphers if gnutlsPriorityString is NULL and Authentication Mode is set to anon. Otherwise we do not set them as they overwrite custom Ciphers. * Added two tests for custom cipher configuration (anon/certvalid mode). * Add call for applyGnutlsPriorityString if gnutlsPriorityString changes. * Merged openssl init code from Connect into osslInitSession closes: https://github.com/rsyslog/rsyslog/issues/4686 * 2021-10-11: build issue: handle undefined MAXPATHLEN, PATH_MAX While we handled missing PATH_MAX, we did not handle missing MAXPATHLEN. This happens under GNU/Hurd, because there is no official limit. However, extremely long pathes are extremely uncommon, so we do not want to use slow dynamic alloc each time we need to build pathes. So we impose a limit of 4KiB, which should be fairly enough. Note that this obviously increases stack requirements in GNU/Hurd. As suggested by Michael Biebl, we have now implemented a generic approach to handle this via autoconf. * 2021-09-12: openssl: extended output information on connection failure Now includes the remote client/server IP address in the log output. * 2021-09-12: imhttp enhancements - query parameter ingestion & basic auth support * Basic Authentication support & tests * configured via imhttp option \"basicAuthFile\". This option should be configured to point to your htpasswd file generated via a standard htpasswd tool. tests: * imhttp-post-payload-basic-auth.sh * imhttp-post-payload-basic-auth-vg.sh * Query parameter ingestion capability & tests use t `addmetadata` option to inject query parameters into metadata for imhttp input. DISTRO PACKAGERS BEWARE: NEW DEPENDENCY FOR IMHTTP: libaprutil (libaprutil1-dev on debian\'ish, apr-util-devel on Red Hat) Thanks to Nelson Yen for the patch. * 2021-09-07: testbench bugfix: privdrop tests under root user did not work When running under root, the privdrop tests did not properly work. This patch fixes the issue and skips test where necessary. This also includes some modernization of the related tests. closes https://github.com/rsyslog/rsyslog/issues/4619 * 2021-09-07: core/ratelimiting: fix rate limiting for already parsed messages Rate limiting may not have worked if the considered message had already been parsed (not having NEEDS_PARSING in msgFlags). This affects also imuxsock in its default configuration (useSpecialParser=\"true\" and ratelimit.severity=\"1\") * 2021-09-07: core bugfix: use of property $wday terminates string When $wday is used inside a template, all template parts after it are ignored. For exmaple: template(name=\"json_filename\" type=\"string\" string=\"/var/log/%$wday%.log\") would generate something like \"/var/log/0\" - the \".log\" part would be missing. For the same reason, $wday can not reliably checked in script filters. Thanks to Alain Thivillon for reporting the bug and providing an excellent analysis, which essentiellay was exactly this fix here. closes https://github.com/rsyslog/rsyslog/issues/4670 * 2021-09-07: core/queue bugfix: potential misadressing when queue discarded messages When a discard mark was set, the queue was very busy and discarded messages, a NULL pointer access could happen. Depending on circumstances, several problems could occur, including a SEGFAULT. This is now fixed. closes: https://github.com/rsyslog/rsyslog/issues/4437 * 2021-09-07: imdiga bugfix: iOverallQueueSize calculation could be incorrect This issue only affects testbench and rsyslog development debugging. The active messages counter, used for synchronizing test steps, went wrong when the queue discarded messages on it\'s consumer thread. Now fixed. * 2021-09-06: gnutls driver: SAN priority did not work correctly on server side PrioritizeSAN was not propagated when accepting a new connection, this is now fixed. Thanks to Attila Lakatos for the patch. * 2021-08-24: config: implement script-equavalent for $PrivDrop * statements closes https://github.com/rsyslog/rsyslog/issues/891 * Wed Aug 18 2021 Michael Ströder - Upgrade to rsyslog 8.2108.0: * 2021-08-16: openssl tls: Improved error message output on tls failures. closes: https://github.com/rsyslog/rsyslog/issues/4645 * 2021-08-16: impstats: add percentile metrics tracking functionality Brief overview: TO configure tracking percentile metrics in rainerscript: User would need to define: - which percentile to track, such as [p50, p99, etc.] - window size - note, this correlates directly with memory usage to track the percentiles. To track a value, user would call built-in function `percentile_observe()` in their configurations to record an integer value, and percentile metrics would be emitted every impstats interval. Thanks to Nelson Yen for the patch. * 2021-08-12: imfile: add parameter \"ignoreolderthanoption\" instructs imfile not to ingest a file that has not been modified in the specified number of seconds. Thanks to github user yanjunli76 for the patch (submitted from Nelson Yen) * 2021-08-10: imklog bugfix: invalid memory adressing, could cause abort This is a regeression from commit 94c4a87. It introduced a free() call using an object that was no longer valid (the main pointer to the to-be-freed object) was already freed at time of use. This could cause various issues, including a segfault. Note: this bug was triggerred only during late phase of rsyslog shutdown, so it did not affect regular operation. Special thanks to github user wxiaoguang for analyzing the issue and providing a draft fix proposal, on which this patch builds. see also https://github.com/rsyslog/rsyslog/pull/4629 closes https://github.com/rsyslog/rsyslog/issues/4625 * 2021-08-09: imfile bugfix: deleteStateOnFileDelete missed some state files When the log file is deleted, imfile would attempt to delete the statefile but it was missing the file_id part of the statefile name. This means the statefiles were only removed in the log file was less than 512 characters, because for very small files the file ID hash is not created. This lead to some state files not being deleted. Thanks to pearseimperva for the patch. * 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 If imfile is ingesting log files with readMode set to 2 or 1, the resulting messages all have a \'#\' character at the end. This patch corrects the behaviour. Note: if some external script \"supported\" the bug of extra hash character at the end of line, it may be necessary to update them. closes https://github.com/rsyslog/rsyslog/issues/4491 * 2021-08-09: omelasticsearch bugfix: errorFile mutex was not consistently locked Lock the file during SIGHUPs to avoid issues with concurrent accesses by writeDataError(). Thanks to François Poirotte for the patch. * 2021-08-09: imudp: add socket type (IPv4 vs. 6) to input name Most importantly, the input name is used for stats counter names as well. Previously, the same name was used for IPv4 and IPv6, so we had two counters with an equal name. That left users puzzled. Unfortunately, this change can potentially require changes to existing analysis scripts, as the name is now slightly different. closes https://github.com/rsyslog/rsyslog/issues/4364 * 2021-08-06: omfwd: add capability for action-specific TLS certificate settings This permits to override the global definitions for TLS certificates at the action() level. * 2021-08-06: imfile bugfix: file handle leak if \"freshStartTail\" was turned on * 2021-08-05: imtcp: permit to use different certificate files per input/action This completes the ability to override global/default TLS settings at the imtcp input() level. Support for using multiple CAs/Certs per Connection is now provided. * 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set The interval was accidentally set to keep alive interval. This has been corrected. closes https://github.com/rsyslog/rsyslog/issues/4609 * 2021-07-08: openssl network driver bugfix: small memory leak Fixes a static, non-growing memory leak which existed when parameter \"GnutTLSPriorityString\" was used. This was primarily a cosmetic issue, but caused some grief during development in regard to memory leak detectors. Note: yes, this is for openssl -- the parameter name is historical. * 2021-07-07: psrv bugfix: abort if no listener could be started Modules (like imtcp and imdiag) which use tcpsrv could abort or otherwise malfunction if no listener for a specific input could be started. Found during implementing a new feature, no report from practice. But could very well happen. * 2021-07-07: mmkubernetes bugfix: apiserver error handling - Added graceful handling of apiserver errors with unexpected responses, i.e., anything other than 200, 404, or 429. Idea is that apiserver transient error state will recover. We don\'t want mmkubernetes to miss metadata resolution for containers that don\'t have cached metadata. During these transient error states, mmkubernetes will provide basic container file path based resolution of namespace and pod metadata for new pods whose metadata is not yet cached. After this error state recovers, mmkubernetes is expected to resume its metadata resolution as expected. - Added a unit test case for apiserver return 500 with changes to mock server - Fixed existing unit test that was failing due to missing expected results file - Added mmkubernetes unit tests to testbench Thanks to Abdul Waheed for the patch (submitted from Nelson Yen). * 2021-07-07: ommongodb bugfixes - Fix Segmentation fault when server is down - Add server connexion check while resuming Thanks to Kevin Guillemot for the patch. * 2021-06-28: omkafka improvements - drain librdkafka queues and retry later during rsyslog restart or hup. This re-injects messages into rsyslog\'s native queues. - add statsname on per kafka instance for better visibility - omkafka - count errors related ssl as \"errors_ssl\" Thanks to Nelson Yen for the patch. * 2021-06-23: some CI/QA improvements, Travis-CI disabled For the time being, Travis CI is disabled because it was outdated and Travis also changed their system. We will re-evaluate if we re-enable it. Since quite a while the Travits tests were redundant with the rest of CI, so this does not reduce coverage. * 2021-06-23: omhttp bugfix: dynrestpath param in batch mode invalid When batchmode was used, the templates could not be used to expand dynrestpath. We are now storing the restpath param within the batch data if we are in batch mode. When we are in batch mode, and the restpath value changes, the batch is submitted and reinitialized closes: https://github.com/rsyslog/rsyslog/issues/4567 * 2021-06-17: add predefined template RSYSLOG_SyslogRFC5424Format This is essentially the same as RSYSLOG_SyslogProtocol23Format with a better name and a fix to remove the unnecessary LF at the end of the message. The different name also enables us to fix the LF issue without any concern about backwards compatibility. closes https://github.com/rsyslog/rsyslog/issues/4384 * 2021-06-17: impstats/bugfix: _sender_stats reports integer counter as string Note that this introduces a small backwards incompatibility: in previous output the field was of string type, now it is integer (as intended). We discussed this on the mailing list and the overwhelming thought was that this is not a problem because almost all analysis backends are able to cover that format change. This made the bugfix essentially costmetic. HOWEVER, if you still experience issues, please let us know. We can add an option to provide the previous format, and just spared to do so because there was no evidence it was needed. * Tue Jun 15 2021 Michael Ströder - Upgrade to rsyslog 8.2106.0: * NOTE: the prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step. * 2021-06-14: new global option \"parser.supportCompressionExtension\" This permits to turn off rsyslog\'s single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598 * 2021-05-12: imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification. * 2021-05-06: imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. closes https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-29: imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. see also: https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules. * 2021-04-22: refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future. * 2021-04-22: config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. closes https://github.com/rsyslog/rsyslog/issues/4429 * Tue Apr 20 2021 Michael Ströder - Upgrade to rsyslog 8.2104.0: * rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490) * new contributed module imhiredis * new built-in function get_property() to access property vars * mmdblookup: add support for mmdb DB reload on HUP * script bugfix: empty array in foreach() improperly handled * imjournal bugfixes (handle leak, empty file) * new contributed function module fmunflatten * test bugfix: some tests did not work with newer TLS library versions * some improvements to project CI * Fri Feb 26 2021 Thomas Blume - update remote.conf example file to new \'Address\' and \'Port\' notation (bsc#1182653) * Tue Feb 16 2021 Michael Ströder - HTTPS URLs used for source- Upgrade to rsyslog 8.2102.0: * omfwd: add stats counter for sent bytes * omfwd: add error reporting configuration option * action stats counter bugfix: failure count was not properly incremented * action stats counter bugfix: resume count was not incremented * omfwd bugfix: segfault or error if port not given * lookup table bugfix: data race on lookup table reload * testbench modernization * testbench: fix invalid sequence of kafka tests runs * testbench: fix kafkacat issues * testbench: fix year-dependendt clickhouse test
|
|
|