Changelog

Version 4.1.4 [DEVEL] (rgerhards), 2009-01-29

• bugfix: inconsistent use of mutex/atomic operations could cause segfault
  details are too many, for full analysis see blog post at:
  http://blog.gerhards.net/2009/01/rsyslog-data-race-analysis.html

• bugfix: unitialized mutex was used in msg.c:getPRI
  This was subtle, because getPRI is called as part of the debugging code
  (always executed) in syslogd.c:logmsg.

• bufgix: $PreserveFQDN was not properly handled for locally emitted
  messages

Version 4.1.3 [DEVEL] (rgerhards), 2008-12-17

• added $InputTCPServerAddtlFrameDelimiter config directive, which
  enables to specify an additional, non-standard message delimiter
  for processing plain tcp syslog. This is primarily a fix for the invalid
  framing used in Juniper’s NetScreen products. Credit to forum user
  Arv for suggesting this solution.

• added $InputTCPServerInputName property, which enables a name to be
  specified that will be available during message processing in the
  inputname property. This is considered useful for logic that treats
  messages differently depending on which input received them.

• added $PreserveFQDN config file directive
  Enables to use FQDNs in sender names where the legacy default
  would have stripped the domain part.
  Thanks to BlinkMind, Inc. http://www.blinkmind.com for sponsoring this
  development.

• bugfix: imudp went into an endless loop under some circumstances
  (but could also leave it under some other circumstances…)
  Thanks to David Lang and speedfox for reporting this issue.

Version 4.1.2 [DEVEL] (rgerhards), 2008-12-04

• bugfix: code did not compile without zlib
• security bugfix: $AllowedSender was not honored, all senders were
  permitted instead (see http://www.rsyslog.com/Article322.phtml)

• security fix: imudp emitted a message when a non-permitted sender
  tried to send a message to it. This behaviour is operator-configurable.
  If enabled, a message was emitted each time. That way an attacker could
  effectively fill the disk via this facility. The message is now
  emitted only once in a minute (this currently is a hard-coded limit,
  if someone comes up with a good reason to make it configurable, we
  will probably do that).

• doc bugfix: typo in v3 compatibility document directive syntax
  thanks to Andrej for reporting

• imported other changes from 3.21.8 and 3.20.1 (see there)

Version 4.1.0 [DEVEL] (rgerhards), 2008-11-18

********************************* WARNING *********************************
This version has a slightly different on-disk format for message entries.
As a consequence, old queue files being read by this version may have
an invalid output timestamp, which could result to some malfunction inside
the output driver. It is recommended to drain queues with the previous
version before switching to this one.
********************************* WARNING *********************************

• greatly enhanced performance when compared to v3.
• added configuration directive “HUPisRestart” which enables to configure
  HUP to be either a full restart or “just” a leightweight way to
  close open files.

• enhanced legacy syslog parser to detect year if part of the timestamp
  the format is based on what Cisco devices seem to emit.

• added a setting “$OptimizeForUniprocessor” to enable users to turn off
  pthread_yield calls which are counter-productive on multiprocessor
  machines (but have been shown to be useful on uniprocessors)

• reordered imudp processing. Message parsing is now done as part of main
  message queue worker processing (was part of the input thread)
  This should also improve performance, as potentially more work is
  done in parallel.

• bugfix: compressed syslog messages could be slightly mis-uncompressed
  if the last byte of the compressed record was a NUL

• added $UDPServerTimeRequery option which enables to work with
  less acurate timestamps in favor of performance. This enables querying
  of the time only every n-th time if imudp is running in the tight
  receive loop (aka receiving messsages at a high rate)

• doc bugfix: queue doc had wrong parameter name for setting controlling
  worker thread shutdown period

• restructured rsyslog.conf documentation
• bugfix: memory leak in ompgsql
  Thanks to Ken for providing the patch