rsyslog

High-performance log ingestion and ETL engine

rsyslog

High-performance log ingestion and ETL engine

liblognorm 2.1.1: Bug-fix release

friedlliblognorm,

We are pleased to announce liblognorm 2.1.1, a bug-fix release of the fast log-normalization library used by rsyslog’s mmnormalize module and other applications.

This release corrects parser edge cases and an optimized TurboVM build failure. It is recommended for users of liblognorm 2.1.0.

Illustration of raw log data becoming structured data
AI-generated illustration: log normalization from raw events to structured data.

What is fixed

  • date-rfc5424 no longer risks integer overflow when parsing very long fractional timestamp components for timestamp-unix-ms.
  • Literal matching with byte-counted input containing an embedded NUL byte is now bounded by the input terminator.
  • Malformed date-rfc3164 parser definitions with a null format are safely rejected instead of dereferencing a null pointer.
  • TurboVM optimized builds no longer fail because of the repeat-name-length compiler warning.

Existing valid rulebases remain compatible. TurboVM remains optional and can be enabled with ./configure --enable-turbo.

Release information

The complete release record is available in the liblognorm 2.1.1 ChangeLog; the source is tagged as v2.1.1.

Download

https://www.liblognorm.com/download/liblognorm-2-1-1/

Scroll to top