| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: rsyslog-module-gtls | Distribution: openSUSE Step 15 |
| Version: 8.2106.0 | Vendor: openSUSE |
| Release: 5.12.1 | Build date: Thu Dec 8 19:08:33 2022 |
| Group: System/Daemons | Build host: armbuild21 |
| Size: 68324 | Source RPM: rsyslog-8.2106.0-5.12.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: http://www.rsyslog.com/ | |
| Summary: TLS encryption support module for rsyslog | |
Rsyslog is an enhanced multi-threaded syslog daemon. See rsyslog package. This module provides the ability for TLS encrypted TCP logging using the GnuTLS library.
Apache-2.0 AND GPL-3.0-or-later
* Wed Nov 30 2022 thomas.blume@suse.com
- fix parsing of legacy config syntax (bsc#1205275)
* add:
0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch
0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch
* Mon Sep 12 2022 thomas.blume@suse.com
- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833)
* this legacy setting from pre-systemd times is obsolete and can
block important systemd messages
* Fri Jul 29 2022 thomas.blume@suse.com
- fix segfault in qDeqLinkedList during shutdown (bsc#1199283)
* add 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch
* Tue May 31 2022 thomas.blume@suse.com
- Remove inotify watch descriptor in imfile on inode change detected
(bsc#1198939)
* add 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch
* Fri May 06 2022 thomas.blume@suse.com
- (CVE-2022-24903) fix potential heap buffer overflow in modules for TCP
syslog reception (bsc#1199061)
* add CVE-2022-24903.patch
* Tue Feb 15 2022 thomas.blume@suse.com
- add service dependencies for remote logging (bsc#1194669)
- update config example in remote.conf to match upstream documentation
* Thu Jan 13 2022 thomas.blume@suse.com
- fix config parameters in specfile (bsc#1194593)
* Tue Jun 15 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2106.0:
* NOTE: the prime new feature is support for TLS and non-TLS connections
via imtcp in parallel. Furthermore, most TLS parameters can now be overriden
at the input() level. The notable exceptions are certificate files, something
that is due to be implemented as next step.
* 2021-06-14: new global option "parser.supportCompressionExtension"
This permits to turn off rsyslog's single-message compression extension
when it interferes with non-syslog message processing (the parser
subsystem expects syslog messages, not generic text)
closes https://github.com/rsyslog/rsyslog/issues/4598
* 2021-05-12: imtcp: add more override config params to input()
It is now possible to override all module parameters at the input() level. Module
parameters serve as defaults. Existing configs need no modification.
* 2021-05-06: imtcp: add stream driver parameter to input() configuration
This permits to have different inputs use different stream drivers
and stream driver parameters.
closes https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-29: imtcp: permit to run multiple inputs in parallel
Previously, a single server was used to run all imtcp inputs. This
had a couple of drawsbacks. First and foremost, we could not use
different stream drivers in the varios inputs. This patch now
provides a baseline to do that, but does still not implement the
capability (in this sense it is a staging patch).
Secondly, we now ensure that each input has at least one exclusive
thread for processing, untangling the performance of multiple
inputs from each other.
see also: https://github.com/rsyslog/rsyslog/issues/3727
* 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown
tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and,
in theory, also others - even ones we do not know about). However, the
internal synchornization did not properly take multiple tcpsrv users
in consideration.
As such, a single user could hang under some circumstances. This was
caused by improperly awaking all users from a pthread condition wait.
That in turn could lead to some sluggish behaviour and, in rare cases,
a hang at shutdown.
Note: it was highly unlikely to experience real problems with the
officially provided modules.
* 2021-04-22: refactoring of syslog/tcp driver parameter passing
This has now been generalized to a parameter block, which makes it much cleaner and
also easier to add new parameters in the future.
* 2021-04-22: config script: add re_match_i() and re_extract_i() functions
This provides case-insensitive regex functionality.
closes https://github.com/rsyslog/rsyslog/issues/4429
* Tue Apr 20 2021 michael@stroeder.com
- Upgrade to rsyslog 8.2104.0:
* rainerscript: call getgrnam_r repeatedly to get all group members
(bsc#1178490)
* new contributed module imhiredis
* new built-in function get_property() to access property vars
* mmdblookup: add support for mmdb DB reload on HUP
* script bugfix: empty array in foreach() improperly handled
* imjournal bugfixes (handle leak, empty file)
* new contributed function module fmunflatten
* test bugfix: some tests did not work with newer TLS library versions
* some improvements to project CI
* Fri Feb 26 2021 thomas.blume@suse.com
- update remote.conf example file to new 'Address' and 'Port' notation
(bsc#1182653)
* Tue Feb 16 2021 michael@stroeder.com
- HTTPS URLs used for source
- Upgrade to rsyslog 8.2102.0:
* omfwd: add stats counter for sent bytes
* omfwd: add error reporting configuration option
* action stats counter bugfix: failure count was not properly incremented
* action stats counter bugfix: resume count was not incremented
* omfwd bugfix: segfault or error if port not given
* lookup table bugfix: data race on lookup table reload
* testbench modernization
* testbench: fix invalid sequence of kafka tests runs
* testbench: fix kafkacat issues
* testbench: fix year-dependendt clickhouse test
* Tue Dec 08 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2012.0:
* testbench bugfix: some tests did not work in make distcheck
* immark: rewrite with many improvements
* usability: re-phrase error message to help users better understand cause
* add new system property $now-unixtimestamp
* omfwd: add new rate limit option
* omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default
* Thu Nov 26 2020 lnussel@suse.de
- prepare usrmerge (boo#1029961)
* Mon Nov 09 2020 thomas.blume@suse.com
- fix location and naming of journald dropin (bsc#1178288)
* Wed Oct 28 2020 thomas.blume@suse.com
- remove legacy stuff from specfile
* sysvinit is not supported anymore, so remove all tests
related to systemv in the specfile
* Tue Oct 20 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2010.0:
* gnutls TLS subsystem bugfix: handshake error handling
* core/msg bugfix: memory leak
* core/msg bugfix: segfault in jsonPathFindNext() when <root> not an object
* openssl TLS subsystem: improvments of error and status messages
* add 'exists()' script function to check if variable exists
* core bugfix: do not create empty JSON objects on non-existent key access
* gnutls subsysem bugfix: potential hang on session closure
* core/network bugfix: obey net.enableDNS=off when querying local hostname
* core bugfix: potential segfault on query of PROGRAMNAME property
* imtcp bugfix: broken connection not necessariy detected
* new module: imhttp - http input
* mmdarwin bugfix: potential zero uuid when reusing existing one
* imdocker bugfix: build issue on some platforms
* omudpspoof bugfix: make compatbile with Solaris build
* testbench fix: python 3 incompatibility
* core bugfix: segfault if disk-queue file cannot be created
* cosmetic: fix dummy module name in debug output
* config bugfix: intended warning emitted as error
* Sat Aug 29 2020 michael@stroeder.com
- Upgrade to rsyslog 8.2008.0
Way too many changes since 8.39.0 to be listed here.
- Added custom unit file rsyslog.service because
systemd service file was removed from upstream project
- Removed obsolete patches:
* 0001-satisfy-gcc-flag-fno-common.patch
* rsyslog-pgsql-pkg-config.patch
* rsyslog-unit.patch
* Sat Jul 11 2020 kukuk@suse.com
- Use systemd_ordering instead of requiring to make rsyslog useable
in containers.
* Wed Apr 15 2020 rjschwei@suse.com
- Fix the URL for bug reporting, should not point to novell.com
(bsc#1173433)
* Thu Feb 06 2020 rtyler@brokenco.de
- Add support for omkafka which is now in Factory, and 15.x repos
* Thu Jan 09 2020 thomas.blume@suse.com
- avoid build error with gcc flag -fno-common (bsc#1160414)
* add 0001-satisfy-gcc-flag-fno-common.patch
* Thu Jul 25 2019 matthias.gerstner@suse.com
- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by
firewalld, see [1].
[1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html
* Tue Mar 05 2019 dimstar@opensuse.org
- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the
right libraries/directories for postgresql. According to pgsql
upstream, pg_config must only be used to buildpgsql modules.
* Fri Feb 22 2019 Thomas.Blume@suse.com
- set default permissions before include directives (bsc#1126233)
* Logfile open modes depend on position in the config file, see
https://www.rsyslog.com/doc/rsconf1_filecreatemode.html
* Wed Nov 21 2018 egotthold@suse.com
- Upgrade to rsyslog 8.39.0
* imfile: improve truncation detection
* imjournal: work around journald excessive reloading behavior
* errmsg: remove no longer needed code
* queue bugfix: invalid error message on queue startup
* bugfix imrelp: regression with legacy configuration startup fail
* bugfix imudp: stall of connection and/or potential segfault
* bugfix gcry crypto driver: small memleak
* fix potential misadressing in encryption subsystem
* ksi subsystem changes
* bugfix core: regex compile error messages could be incorrect
* bugfix core: potential hang on rsyslog termination
* bugfix imkafka: system hang when backgrounded
* bugfix imfile: file change was not reliably detected
* bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr
* bugfix queue subsystem: DA queue did ignore encryption settings
* bugfix KSI: lmsig-ksils12 module skips signing the last block
* bugfix fmhash: function hash64mod sometimes returned wrong result
* bugfix core/debug: data written to random fd 2 under some debug settings
* Tue Oct 16 2018 Thomas.Blume@suse.com
- rsyslog configuration cleanup by filter rules in separate files (bug#1102720)
* add parsing of additional filter rules in /etc/rsyslog.d/*.frule
* add acpid.frule, firewall.frule, NetworkManager.frule
* Wed Oct 10 2018 kukuk@suse.de
- Enable ForwardToSyslog for journald to get syslog messages
[bsc#1110456]
* Tue Sep 18 2018 michael@stroeder.com
- Update to rsyslog 8.38.0:
* imfile: support for endmsg.regex
* omhttp: new contribued module
* imrelp: add support for seting address to bind to (#894)
* ommysql: support mysql unix domain socket
* omusrmsg: do not fall back to max username length of 8
* various bug fixes and minor updates to other modules and core
* various fixes for memory leaks
* Thu Jul 19 2018 Thomas.Blume@suse.com
- remove references to obsolete SYSLOG_REQUIRES_NETWORK
variable (bsc#1101642)
* Wed Jun 27 2018 astieger@suse.com
- rsyslog 8.36.0:
* Liblogging-stdlog deprecated
* OpenSSL based TLS driver added in addition to GnuTLS
* GnuTLS TLS driver: support intermediate certificates
* imptcp: add ability to configure socket backlog
* fmhash: new hash function module
* updates and fixes to various modules
* omfwd: add support for bind-to-address for UDP
* mmkubernetes: new module
- updates and fixes to various modules
* Tue Jun 26 2018 Thomas.Blume@suse.com
- fix CVE-2015-3243 rsyslog: some log files are created world-readable
(bsc#935393)
* Sat Mar 24 2018 astieger@suse.com
- rsyslog 8.33.1:
* devcontainer: use some more sensible defaults
* auto-detect if running inside a container (as pid 1)
* config: add include() script object
* template: add option to generate json "container"
* core/template: add format jsonf to constant template entries
* config: add ability to disable config parameter ("config.enable")
* script: permit to use environment variables during configuration
* new global config parameter "shutdown.enable.ctlc"
* config optimizer: detect totally empty "if" statements and optimize them out
* template: constant entry can now also be formatted as json field
* omstdout: support for new-style configuration parameters added
* core: set TZ on startup if not already set
* imjournal bugfix: file handle leak during journal rotation
* lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
* script bugfix: replace() function worked incorrectly in some cases
* core bugfix: misadressing in external command parser
* core bugfix: small memory leak in external command parser
* core bugfix: string not properly terminated when RFC5424 MSGID is used
* bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
rsyslog pid, as it is no longer required for tracking under
systemd (-iNONE). Adjust rsyslog-unit.patch to match.
* Mon Mar 19 2018 kukuk@suse.de
- Use %license instead of %doc [bsc#1082318]
* Mon Feb 19 2018 Thomas.Blume@suse.com
- fix includes for apparmor profile (bsc#1080238)
* Fri Jan 26 2018 astieger@suse.com
- rsyslog 8.32.0
* libfastjson 0.99.8 required
* libczmq >= 3.0.2 is now required for omczmq
* libcurl is now needed for rsyslog core
* rsyslogd: add capability to specify that no pid file shall be written
* core improvements and bug fixes
* RainerScript improvements and bug fixes
* build fixes, including gcc7 fixes
drop 0001-imgssapi-fix-compiler-warnings.patch
* various bug fixes in multiple modules
* Fri Jan 19 2018 rgerhards@adiscon.com
- remove build dependency on libee
* Thu Dec 07 2017 kukuk@suse.de
- Disable news by default, we don't need to clobber all systems
with this for the very few remaining news servers
* Thu Nov 23 2017 rbrown@suse.com
- Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468)
* Fri Nov 17 2017 astieger@suse.com
- Ensure user "news" exists - bsc#1068678
* Tue Nov 14 2017 astieger@suse.com
- rsyslog 8.30.0
* changed behaviour: all variables are now case-insensitive by default
* core: handle (JSON) variables in case-insensitive way
* imjournal: made switching to persistent journal in runtime possible
* mmanon: complete refactor and enhancements
* imfile: add "fileoffset" metadata
* RainerScript: add ltrim and rtrim functions
* core: report module name when suspending action
* core: add ability to limit number of error messages going to stderr
* tcpsrv subsystem: improvate clarity of some error messages
* imptcp: include module name in error msg
* imtcp: include module name in error msg
* tls improvement: better error message if certificate file cannot be read
* omfwd: slightly improved error messages during config parsing
* ommysql improvements
* ommysql bugfix: do not duplicate entries on failed transaction
* imtcp bugfix: parameter priorityString was ignored
* template/bugfix: invalid template option conflict detection
* core/actions: fix handling of data-induced errors
* core/action bugfix: no "action suspended" message during retry processing
* core/ratelimit bugfix: race can lead to segfault
* core bugfix: rsyslog aborts if errmsg is generated in early startup
* core bugfix: informational messages was logged with error severity
* core bugfix: --enable-debugless build was broken
* queue bugfix: file write error message was incorrect
* omrelp bugfix: segfault when rebindinterval parameter is used
* omkafka bugfix: invalid load of failedmsg file on startup if disabled
* kafka bugfix: problem on invalid kafka configuration values
* imudp bugfix: UDP oversize message not properly handled
* core bugfix: memory corruption during configuration parsing
* core bugfix: race on worker thread termination during shutdown
* omelasticsearch: avoid ES5 warnings while sending json in bulkmode
* omelasticsearch bugfix: incompatibility with newer ElasticSearch version
* imptcp bugfix: invalid mutex addressing on some platforms
* imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
* libfastjson 0.99.7 is now mandatory
* libsystemd-journal >= 234 is now recommended
- packaging:
* add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch
* Tue Aug 08 2017 astieger@suse.com
- rsyslog 8.29.0:
* imptcp: add experimental parameter "multiline"
* imptcp: framing-related error messages now also indicate remote peer
* imtcp: framing-related error messages now also indicate remote peer
* imptcp: add session statistics conunter
* imtcp: add ability to specify GnuTLS priority string
* impstats: add new ressoure counter "openfiles"
* pmnormalize: new parser module
* core/queue: provide informational messages on thread startup and shutdown
* omfwd/udp: improve error reporting, depricate maxerrormessages parameter
* core: add parameters debug.file and debug.whitelist
* core/net.c: improve UDP socket creation error messages
* omfwd/udp: add "udp.sendbuf" parameter
* core: make rsyslog internal message rate-limiter configurable
* omelasticsearch bugfixes and changed ES5 API support
+ avoid 404 during health check
+ avoid ES5 warnings while sending json
+ bugfix for memomry leak while writing error file
* imfile bugfix: wildcard detection issue on path wildcards
* omfwd bugfix: always give reason for suspension
* omfwd bugfix: configured compression level was not properly used
* imptcp bugfix: potential socket leak on session shutdown
* omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
* imklog: fix permitnonkernelfacility not working
* impstats bugfix: impstats does not handle HUP
* core bugfix: segfault after configuration errors
* core/queue bugfixes
* lmsig_ksi: removed pre-KSI_LS12 components
* Sun Jul 30 2017 michael@stroeder.com
Version 8.28.0 [v8-stable] 2017-06-27
* omfwd: add parameter "tcp_frameDelimiter"
* omkafka: large refactor of kafka subsystem
* imfile: improved handling of atomically renamed file (w/ wildcards)
* imfile: add capability to truncate oversize messages or split into multiple
* mmdblookup fixes and extensions
* bugfix: fixed multiple memory leaks
* imptcp: add new parameter "flowControl"
* imrelp: add "maxDataSize" config parameter
* multiple modules: gtls: improve error if certificate file can't be opened
* omsnare: allow different tab escapes
* omelasticsearch: converted to use libfastjson instead of json-c
* imjournal: _PID fallback
* added fallback for _PID proprety when SYSLOG_PID is not available
* introduced new option "usepid" which sets which property should
rsyslog use, it has 3 states system|syslog|both, default is both
* deprecated "usepidfromsystem" option, still can be used
and override the "usepid"
* it is possible to revert previous default with usepid="syslog"
* multiple modules: add better error messages when regcomp is failing
* omhiredis: fix build warnings
* imfile bugfix: files mv-ed in into directory were not handled
* omprog bugfix: execve() incorrectly called
* imfile bugfix: multiline timeout did not work if state file exists
* lmsig_ksi-ls12 bugfix: build problems on some platforms
* core bugfix: invalid object type assertion
* regression fix: local hostname was not always detected properly...
* bugfix: format security issues in zmq3 modules (bsc#1051798)
* bugfix build system: add libksi only to those binaries that need it
* bugfix KSI ls12 components: invalid tree height calculation
* Mon Jun 05 2017 tchvatal@suse.com
- Drop module-guardtime package
* Upstream libgt died and it does not work with new openssl
* Thu May 18 2017 dziolkowski@suse.com
Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
* optionally emit an error message if incoming messages are truncated
* optionally emit connection tracking message (on connection create and
close)
* add "maxFrameSize" parameter to specify the maximum size permitted
in octet-counted mode
* add parameter "discardTruncatedMsg" to permit truncation of
oversize messages
* improve octect-counted mode detection: if the octet count is larger
then the set frame size (or overly large in general), it is now
assumed that octet-stuffing mode is used. This probably solves a
number of issues seen in real deployments.
- imtcp enhancements:
* add parameter "discardTruncatedMsg" to permit truncation of
oversize messages
* add "maxFrameSize" parameter to specify the maximum size permitted
in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
for configured non-existing file. In polling mode, this message
appeared once in each polling cycle, causing a potentially very large
amout of error messages. Note that they were usually emitted too
infrequently to trigger the error message rate limiter, albeit often
enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
be found
- imfile: add parameter "fileNotFoundError" to optinally disable
"file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
Gethostbyname() is generally considered obsolete, is not reentrant and
cannot really work with IPv6. Changed the only place in rsyslog where
this call remained.
Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
See also https://github.com/rsyslog/rsyslog/issues/1508
Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
both for the actual limit procesing as well as warning messages emitted
see also https://github.com/rsyslog/rsyslog/pull/1520
Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
see also https://github.com/rsyslog/rsyslog/issues/1494
Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message
* Thu Apr 06 2017 astieger@suse.com
- rsyslog 8.26.0:
* liblognorm 2.0.3 is required for mmnormalize
* enable internal error messages at all times
* core: added logging name of source of rate-limited messages
* omfwd: omfwd: add support for network namespaces
* imrelp: honor input name if provided when submitting to impstats
* imptcp: add ability to set owner/group/access perms for uds
* mmnormalize: add ability to load a rulebase from action() parameter
* pmrfc3164 improvements
+ permit to ignore leading space in MSG
+ permit to use at-sign in host names
+ permit to require tag to end in colon
* add new global parameter "umask"
* core: make use of -T command line option more secure
* omfile: add error if both file and dynafile are set
* bugfix: build problem on MacOS (not a supported platform)
* regression fix: in 8.25, str2num() returned error on empty string
* bugfix omsnmp: improper handling of new-style configuration parameters
* bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
* bugfix imfile: wrong files were monitored when using multiple imfile inputs
* bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
* bugfix: immark emitted error messages with text "imuxsock"
* bugfix tcpflood: build failed if RELP was disabled
* fix gcc6 compiler warnings
* the output module array passing interface has been removed
* Mon Mar 06 2017 astieger@suse.com
- use 8.25.0 documentation tarball
* Thu Feb 23 2017 astieger@suse.com
- rsyslog 8.25.0:
* imfile: add support for wildcards in directory names
* add new global option "parser.PermitSlashInProgramname"
* mmdblookup: fix build issues, code cleanup
* improved debug output for queue corruption cases
* an error message is now displayed when a directory owner cannot be set
* rainerscript: add new function ipv42num
* rainerscript: add new function num2ipv4
* bugfix: ratelimiter does not work correctly is time is set back
* core: fix potential message loss in old-style transactional interface
* bugfix queue subsystem: queue corrupted if certain msg props are used
* bugfix imjournal: fixed situation when time goes backwards
* bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
* bugfix core: str2num mishandling empty strings
* bugfix rainerscript: set/unset statement do not check variable name validity
* bugfix mmrm1stspace: last character of rawmsg property was doubled
* bugfix imtcp: fix very small (cosmetic) memory leak
* However, the leak breaks memleak checks in the testbench.
* Fri Feb 10 2017 ndas@suse.com
- sync bug and fate numbers from IBS changes.
* Sun Jan 15 2017 astieger@suse.com
- rsyslog 8.24.0(fate#320546):
* mmrm1stspace: new module; removes first space in MSG if present
* KSI signature provider: file permissions can now be specified
* omzmq: new features
* when the hostname is empty, we now use "localhost-empty-hostname"
* omelasticsearch: remove "asyncrepl" config parameter
* omfwd: Add support for bind-to-device (see below on same for imudp)
* imudp: Add support for bind-to-device
* imudp: limit rcvbufsize parameter to max 1GiB
* rainerscript: implement new "call_indirect" statement
* bugfix imjournal: make state file handling more robust
* bugfix core: lookup table reload was not properly integrated
* bugfix core: potential dealock on shutdown
* bugfix ommongodb: did not work in v8 due to invalid indirection
* bugfix ommongodb: fix tryResume handling
* bugfix omfwd: retry processing was not done correctly, could stall
* bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
* mmdblookup: new maxminddb lookup message modify plugin
* Mon Dec 12 2016 dimstar@opensuse.org
- Replace pkgconfig(libsystemd-journal) BuildRequires with
pkgconfig(libsystemd): the sub-libraries have been merged into
libsystemd since 209 and have ultimately been removed since 230.
* Sun Dec 04 2016 astieger@suse.com
- rsyslog 8.23.0:
* requiring libfastjson 0.99.3
* KSI signatures: removed SHA2-224 hash algorithm
* imfile: new timeout feature for multi-line reads
* omfile: improve robustness against network file system failures
* pmaixforwardedfrom: support for AIX syslogd -s option
* omelasticsearch: add ability to specify max http request size
* omelasticsearch: high availability addressing of ElasticSearch cluster
* omelasticsearch: make compatible with ElasticSearch 2.x and 5.x
* omhiredis: add dynakey attribute.
* omtcl: new contributed module
* RainerScript: provide a capability to set environment variables
* lookup tables: improved error checking
* queue subsystem: add configuration parameter "queue.samplinginterval"
* various bug fixes
* rsgtutil: option to specify KSI publications file certificate constraints
- includes changes from 8.22.0:
* ompgsql: add template support
* generate somewhat better error message on config file syntax error
- includes changes from 8.21.0:
* CHANGE OF BEHAVIOUR:
by default, internal messages are no longer logged via the internal
bridge to rsyslog but via the syslog() API call [either directly or
via liblogging). For the typical single-rsyslogd-instance installation this
is mostly unnoticable (except for some additional latency). If multiple
instances are run, only the "main" (the one processing system log messages)
will see all messages. To return to the old behaviour, do either of those
two:
1) add in rsyslog.conf:
global(processInternalMessages="on")
2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1
This will set a new default - the value can still be overwritten via
rsyslog.conf (method 1). Note that the environment variable must be
set in your **startup script**.
For more information, please visit
http://www.rsyslog.com/rsyslog-error-reporting-improved/
* slightly improved TLS syslog error messages
* queue subsystem: improved robustness
* Tue Jul 19 2016 astieger@suse.com
- rsyslog 8.20.0:
* omrelp: add configurable connection timeout
* pmrfc3164: add support for slashes in hostname
* bugfix omfile: handle chown() failure correctly
* omfile now better conveys status of unwritable files back to core
* config files recursively including themselfes are now detected
* refactored code to not emit compiler warnings in "strict mode"
* bugfix: fix some issues with action CommitTransaction() handling
* bugfix omqmqp1: connecting to the message bus fails on nonstandard port
* testbench/CI enhancements
- Build requirements:
* librelp 1.2.12
* Sat Jun 04 2016 astieger@suse.com
- rsyslog 8.19.0:
* omelasticsearch: add option to permit unsigned certs
* imrelp: better error codes on unvailablity of TLS options
* default stack size for inputs has been explicitely set to 4MiB
* performance improvements
* miscellaneous minor cleanup
* fix: potential misadressing in template config processing
* bugfix omfile: async output file writing does not respect
flushing
* bugfix imfile: corrupted multi-line message when state data was
persisted
* bugfix imfile: missing newline after first line of multiline
message
* bugfix: dynstats unusedMetricTtl bug
* bugfix build system: build was broken on SunOS
* bugfix: afterRun entry point not correctly called
* bugfix dynstats: do not leak file handles
* bugfix omelasticsearch: disable libCURL signal handling
* bugfix omelasticsearc: some regressions were fixed
* improved wording: gnutls error message points to potential
cause
* Tue Apr 19 2016 astieger@suse.com
- rsyslog 8.18.0(bnc#958728):
* templates: add option to convert timestamps to UTC
* omjournal: fix segfault (regression in 8.17.0)
* imptcp: added AF_UNIX support
* new template options
* compressSpace
* date-utc
* redis: support for authentication
* omkafka: makes kafka-producer on-HUP restart optional
* imfile: new "FreshStartTail" input parameter
* omjournal: fix libfastjson API issues
* ommongodb: fix json API issues
* dynamic stats subsystem: a couple of smaller changes
* foreach loop: now also iterates over objects (not just arrays)
* enhancement: queue subsystem is more robst in regard to some corruptions
* enhancement: Allow rsyslog to bind UDP ports even w/out specific
interface being up at the moment.
* new External plugin for sending metrics to SPM Monitoring SaaS
* bugfix imfile: fix memory corruption bug when appending @cee
* bugfix: memory misallocation if position.from and position.to is used
a negative amount of memory is tried to be allocated if position.from
is smaller than the buffer size (at least with json variables). This
usually leads to a segfault.
* bugfix: fix potential memleak in TCP allowed sender definition
* bugfix: $PrivDropToGroupID actually did a name lookup
* bugfix: small memory leak in imfile
* bugfix: double free in jsonmesg template
* bugfix: incorrect formatting of stats when CEE/Json format is used
* bugfix omfwd: new-style keepalive action parameters did not work
due to being inconsistently spelled inside the code. Note that legacy
parameters $keepalive... always worked
* bugfix: memory leaks in logctl utility
* bugfix omrelp: fix segfault if no port action parameter was given
* bugfix imtcp: Messages not terminated by a NL were discarded
* Sun Mar 13 2016 astieger@suse.com
- rsyslog 8.17.0:
* improve json variable performance
* new experimental feature: lookup table suport
* new feature: dynamic statistics counters
* new contributed plugin: omampq1 for AMQP 1.0-compliant brokers
* new set of UTC-based $now family of variables ($now-utc, $year-utc, ...)
* simplified locking when accessing message and local variables
* new global parameter "debug.unloadModules"
* timestamp handling: guard against invalid dates
* imfile: add "trimlineoverbytes" input paramter
* ommongodb: add support for extended json format for dates
* omjournal: add support for templates
* imuxsock: add "ruleset" input parameter(fate#320667)
* imptcp: performance improvements
* improve interface definition in some modules, e.g. mmanon, mmsequence
* rsgtutil: dump mode improvements
+ auto-detect signature file type
+ ability to dump hash chains for log extraction files
* bugfix: unixtimestamp date format was incorrectly computed (leap year)
* bugfix: date-ordinal date format was incorrectly computed (leap year)
* bugfix: some race when shutting down input module threads
* bugfix tcpflood: did not handle connection drops correct in TLS case
* bugfix: abort if global parameter value was wrong
* bugfix omkafka: fix potential NULL pointer addressing
* bugfix impstats: @cee cookie was prefixed to wrong fromat (json vs. cee)
* bugfix imfile: fix race during startup that could lead to some duplication
* bugfix: potential loss of single message at queue shutdown
* bugfix: potential deadlock with heavy variable access
* bugfix ommysql: on some platforms, serverport parameter had no effect
* bugfix omelasticsearch: invalid pointer dereference
* bugfix omhiredis: serverport config parameter did not reliably work
* bugfix rsgtutil: -h command line option did not work
* bugfix lexer: hex numbers were not properly represented
* bugfix TLS syslog: intermittent errors while sending data
* bugfix imfile: abort on startup if no slash was present in file name param
* bugfix rsgtutil: fixed abort when using short command line options
* bugfix rsgtutil: invalid computation of log record extraction file
* bugfix build system: KSI components could only be build if in default path
* Mon Feb 01 2016 astieger@suse.com
- rsyslog 8.16.0:
* rsgtutil: Added extraction support including loglines and hash
chains.
* new system properties for $NOW properties based on UTC
* various bug fixes and improvements
* Thu Jan 28 2016 mrueckert@suse.de
- fix build on sle11: use package name buildrequires instead of
pkgconfig
* Tue Jan 12 2016 astieger@suse.com
- build with libfastjson (mandatory from 8.16.0)
* Sat Jan 02 2016 astieger@suse.com
- rsyslog 8.15.0:
* KSI (incompatible changes):
+ KSI utilities: Added option to set publication url via
- -publications-server. Required for signature verification.
+ UserID and UserKey can be set by parameter
+ Fixed wrong TLV container for KSI signatures from 0905 to 0906.
+ somewhat improved error messages
+ Update for and use libksi 3.4.0.x
* New contributed modules:
+ pmpanngfw: for translating Palo Alto Networks logs
* pmciscoios: support for asterisk before timestamp added
* solr external output plugin much enhanced
* omrabbitmq: improvements
* add support for libfastjson (as a replacement for json-c)
* pmciscoios: support for some format variations
* improvments for 0mq modules:
+ omczmq - suspend / Retry handling
+ omczmq - improved efficiency
+ omczmq - added ability to set a timeout for sends
+ omczmq - set topics can be in separate frame (default) or
part of message frame (configurable)
+ imczmq - ZMQ_ROUTER support
* Note the upstream supported modules not enabled in SUSE package:
+ grok (mmgrok)
+ omkafka
* add support for building with libfastjson
* bugfix: invalid mutex handling in omfile async write mode
could lead to segfault, even though highly unlikely (caught by
testbench on a single platform) (bsc#1000488)
* Sat Nov 07 2015 astieger@suse.com
- rsyslog 8.14.0:
* add property "rawmsg-after-pri"
* bugfix: potential misadresseing in imfile
* bugfix: re_extract RainerScript function did not work
* Thu Sep 24 2015 astieger@suse.com
- rsyslog 8.13.0:
* ZeroMQ enhancements
* Redis enhancements
* mmnormalize: liblognorm error messages are now emitted via
regular rsyslog error reporting mechanism (aka "are now logged")
* networking improvements
- drop rsyslog-8.12.0-parallel-build.patch, is upstream
- drop rsyslog-8.12.0-gnutls.patch, same
* Wed Aug 26 2015 astieger@suse.com
- rsyslog 8.12.0:
* Harmonize resetConfigVariables values and defaults
* GT/KSI: fix some issues in signature file format and add conversion tool
* bugfix: ommysql did not work when gnutls was enabled
* bugfix omfile: potential memory leak on file close
* bugfix omfile: potential race in dynafile detection/creation
* bugfix omfile: Fix race-condition detection in path-creation code
* bugfix parser subsystem: potential misadressing in SanitizeMsg()
* imfile: files moved outside of directory are now (properly) handled
* bugfix: imfile: segfault when using startmsg.regex
* bugfix imfile: file table was corrupted when on file deletion
* bugfix ompgsql: transaction were improperly handled
* bugfix mmjsonparse: memory leak if non-cee-json message is processed
* testbench: remove raciness from UDP based tests
* testbench: added bash into all scripts makign it mandatory
* bugfix testbench: Fixed problem building syslog_caller util when
liblogging-stdlog is not available.
- add upstream patches:
* rsyslog-8.12.0-gnutls.patch to fix build with gnutls
* rsyslog-8.12.0-parallel-build.patch to fix parallel build
* Wed Jul 01 2015 astieger@suse.com
- rsyslog 8.11.0
- new features:
* signature provider for Keyless Signature Infrastructure (KSI)
- bug fixes:
* imfile: regex multiline mode ignored escapeLF option
* omkafka: fixed several concurrency issues, most of them related
to dynamic topics.
* execonlywhenpreviousissuspended did not work correctly
* core engine: ensured global variable atomicity
* imfile: segfault when using startmsg.regex because of empty log
line
* Tue May 19 2015 astieger@suse.com
- rsyslog 8.10.0:
* imfile: add capability to process multi-line messages based on regex
* pmrfc3164: add new parameter "detect.yearAfterTimestamp"
* pmrfc3164: add new parameter "permit.squareBracesInHostname"
* supplementary groups are now set when dropping privileges
* imfile: added brace glob expansion to wildcard
* zmq: add the ability for zeromq input and outputs to advertise their
presence on UDP via the zbeacon API.
* added omhttpfs: contributed module for writing to HDFS via HTTP
* bug fixes
- packaging changes:
* build with GnuTLS support again as 3.4.0 is now supported
* Thu Apr 30 2015 jengelh@inai.de
- Documentation does not depend on the presence of anything
* Mon Apr 27 2015 jsegitz@novell.com
- Adjusted apparmor profile based on the suggestions by Christian Boltz
* Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls
* Moved profiles to /usr/share/apparmor/extra-profiles/
* Blocked capability block_suspend
plus some other small fixes
* Mon Apr 20 2015 jsegitz@novell.com
- Adjusted apparmor profile to prevent aa-genprof failures
(bnc#925512)
* Mon Apr 13 2015 astieger@suse.com
- disable GnuTLS support, does not build with GnuTLS 3.4.0
* Tue Apr 07 2015 astieger@suse.com
- rsyslog 8.9.0:
- omprog: add option "hup.forward" to forwards HUP to external
plugins
- imuxsock: added capability to use regular parser chain
- new sysSock.useSpecialParser module parameter
- new sysSock.parseHostname module parameter
- new useSpecialParser input parameter
- new parseHostname input parameter
- 0mq: improvements in input and output modules
- imtcp: add support for ip based bind for imtcp -> param "address"
- bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData
- bugfix imfile: partial data loss, especially in readMode != 0
- bugfix: potential large memory consumption with failed actions
- bugfix: omudpspoof: invalid default send template in RainerScript format
- bugfix: size-based legacy config statements did not work properly
on some platforms, they were incorrectly handled, resulting in all
sorts of "interesting" effects (up to segfault on startup)
- build system: added option --without-valgrind-testbench
... which provides the capability to either enforce or turn off
valgrind use inside the testbench. Thanks to whissi for the patch.
- rsyslogd: fix misleading typos in error messa
- remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch
* Sun Mar 01 2015 astieger@suse.com
- rsyslog 8.8.0:
- omkafka: add support for dynamic topics and auto partitioning
- imtcp/imptcp: support for broken Cisco ASA TCP syslog framing
- omfwd: more detailled error messages in case of UDP send error
- TLS syslog: enable capability to turn on GnuTLS debug logging
- bugfix: $AbortOnUncleanConfig did not work
- improve rsyslogd -v output and error message with meta information
- bugfix imtcp: octet-counted framing cannot be turned off
- bugfix: build problems on Illuminos
- bugfix: invalid data size for iMaxLine global property
- bugfix: negative values for maxMessageSize global parameter were permitted
- add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch
to fix compiler warnings/errors
* Fri Feb 13 2015 astieger@suse.com
- rsyslog 8.7.0:
- add message metadata "system" to msg object
this permits to store metadata alongside the message
- imfile: add support for "filename" metadata
this is useful in cases where wildcards are used
- imptcp: make stats counter names consistent with what imudp, imtcp uses
- added new module "omkafka" to support writing to Apache Kafka
- omfwd: add new "udp.senddelay" parameter
- mmnormalize enhancements
- RainerScript "foreach" iterator and array reading support
Thanks to Janmejay Singh for the patch.
- now requires liblognorm >= 1.0.2
- add support for systemd >= 209 library names
- BSD "ntp" facility (value 12) is now also supported in filter
Note: this patch was released under ASL 2.0 (see email-conversation).
- bugfix: global(localHostName="xxx") was not respected in all modules
- bugfix: emit correct error message on config-file-not-found
- bugfix: impstats emitted invalid JSON format (if JSON was selected)
- bugfix: (small) memory leak in omfile's outchannel code
- bugfix: imuxsock did not deactivate some code not supported by platform
- includes changes from 8.6.0:
- configuration-setting rsyslogd command line options deprecated
- new and enhanced plugins for 0mq. These are currently experimantal.
- empty rulesets have been permitted. They no longer raise a syntax error.
- add parameter -N3 to enable config check of partial config file
Use for config include files. Disables checking if any action exists at
all.
- rsyslogd -e option has finally been removed
It is deprectated since many years.
- testbench improvements
- testbench is now by default disabled
- add new RainerScript functions warp() and replace()
- mmnormalize can now also work on a variable
- new property date options for day ordinal and week number
- remove --enable-zlib configure option, we always require it
- slight source-tree restructuring: contributed modules are now in their
own ./contrib directory. The idea is to make it clearer to the end user
which plugins are supported by the rsyslog project (those in ./plugins).
- bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used
- bugfix: not all files closed on auto-backgrounding startup
- bugfix: typo in queue configuration parameter
- bugfix: unitialized buffer off-by-one error in hostname generation
- bugfix imuxsock: possible segfault when SysSock.Use="off"
- bugfix: RainerScript: invalid ruleset names were accepted
- bugfix: some module entry points were not called for all modules
- bugfix omlibdbi: connection was taken down in wrong thread
- imttcp was removed because it was an incompleted experimental module
- pmrfc3164sd because it was a custom module nobody used
- omoracle was removed because it was orphaned and did not build/work
for quite some years and nobody was interested in fixing it
- includes changes from 8.5.0:
- imfile greatly refactored and support for wildcards added
- PRI-handling code refactored for more clarity and robustness
- ommail: add support for RainerScript config system [action() object]
- refactored the auto-backgrounding method
- make gntls tcp syslog driver emit more error messages
- bugfix: imfile did not complain if configured file did not exist
- bugfix: build failure on systems which don't have json_tokener_errors
- imgssapi: log remote peer address in some error messages
- includes changes from 8.4.3:
- ommail: minor bugfixes & improvements
- bugfix imkmsg: infinite loop on OpenVZ VMs
- bugfix: typo in queue configuration parameter made parameter unusable
- bugfix: unitialized buffer off-by-one error in hostname generation
- bugfix imfile: segfault on startup in "inotify" mode
- bugfix imfile: could make rsyslog exit in inotify mode
- bugfix: rsgtutil sometimes crashed in verify mode if file did not exist
- bugfix imklog: pri was miscalculated
- bugfix: imjournal did not build properly
- bugfix: mmcount did no longer build
- bugfix imuxsock: possible segfault when SysSock.Use="off"
- rsyslog Version 8.5.0 fixed bsc#992146
* Thu Dec 04 2014 andreas.stieger@gmx.de
- set file permissions only on first install [boo#899316]
* Wed Oct 22 2014 heinemannj66@gmail.com
- Changed BuildRequires dependencies for SLES11SP3
- BuildRequires: libjson-c-devel
- BuildRequires: libestr-devel
- BuildRequires: liblogging-devel
- BuildRequires: librelp-devel
- BuildRequires: libee-devel
- BuildRequires: liblognorm-devel
- BuildRequires: libuuid-devel
* Sat Oct 18 2014 ledest@gmail.com
- fix shebang of rsyslog-service-prepare script
/usr/lib/rsyslog/lmnsd_gtls.so
Generated by rpm2html 1.8.1
Fabrice Bellet, Tue Jul 9 18:42:22 2024