stable

Changelog for 7.6.7 (v7-stable)

Version 7.6.7 [v7.6-stable] 2014-10-02

  • bugfix: the fix for CVE-2014-3634 did not handle all cases
    This is corrected now. See also: CVE-2014-3683
  • fixed a build problem on some platforms
    Thanks to Olaf for the patch
  • behaviour change: “msg” of messages with invalid PRI set to “rawmsg”
    When the PRI is invalid, the rest of the header cannot be valid. So
    we move all of it to MSG and do not try to parse it out. Note that
    this is not directly related to the security issue but rather done
    because it makes most sense.

rsyslog 7.6.7 (v7-stable) released

This is primarily a re-release of 7.6.6 because the patch for the PRI vulnerability was incomplete. Special thanks to “mancha” for notifying us and helping to get it right.

For more info, please see: http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/

Packages are also already available in the package archives.

ChangeLog:

rsyslog 8.4.1 (v8-stable) released

We have just released 8.4.1 of the v8-stable branch.

This is primarily a bug-fixing release, but provides one small enhancement, the so-called “bracketing mode” of impstats. It tells impstats to emit begin and end message before and after emitting stats.

Please note that this releases also fixes a potential remote DoS, which may happen for some (non-default) configurations. As such, users are highly encouraged to upgrade to this version.

ChangeLog:

http://www.rsyslog.com/changelog-for-8-4-1-v8-stable/

Download:

http://www.rsyslog.com/downloads/download-v8-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Changelog for 8.4.1 (v8-stable)

Version 8.4.1 [v8-stable] 2014-09-30

  • imudp: add for bracketing mode, which makes parsing stats easier
  • permit at-sign in variable names
    closes: https://github.com/rsyslog/rsyslog/issues/110
  • bugfix: fix syntax error in anon_cc_numbers.py script
    Thanks to github user anthcourtney for the patch.
    closes: https://github.com/rsyslog/rsyslog/issues/109
  • bugfix: ompgsql: don’t loose uncomitted data on retry
    Thanks to Jared Johnson and Axel Rau for the patch.
  • bugfix: imfile: if a state file for a different file name was set, that different file (name) was monitored instead of the configured one. Now, the state file is deleted and the correct file monitored.
    closes: https://github.com/rsyslog/rsyslog/issues/103
  • bugfix: omudpspoof: source port was invalid
    Thanks to Pavel Levshin for the patch
  • bugfix: build failure on systems which don’t have json_tokener_errors
    Older versions of json-c need to use a different API (which don’t exists on newer versions, unfortunately…)
    Thanks to Thomas D. for reporting this problem.
  • bugfix: omelasticsearch does not work with broken/changed ES 1.0+ API
    closes: https://github.com/rsyslog/rsyslog/issues/104
  • bugfix: mmanon did not properly anonymize IP addresses starting with ‘9’
    Thanks to defa-at-so36.net for reporting this problem.
    closes: http://bugzilla.adiscon.com/show_bug.cgi?id=529
  • bugfix: build problems on SuSe Linux
    Thanks Andreas Stieger for the patch
  • bugfix: omelasticsearch error file did not work correctly on ES 1.0+ due to a breaking change in the ElasticSearch API.
    see also: https://github.com/rsyslog/rsyslog/issues/104
  • bugfix: potential abort when a message with PRI > 191 was processed if the “pri-text” property was used in active templates, this could be abused to a remote denial of service from permitted senders
    see also: CVE-2014-3634

Changelog for 7.6.6 (v7-stable)

Version 7.6.6 [v7.6-stable] 2014-09-30

  • bugfix: potential abort when a message with PRI > 191 was processed
    if the “pri-text” property was used in active templates, this could be abused to a remote denial of service from permitted senders see also: CVE-2014-3634
  • bugfix: potential segfault on startup on 64 bit systems
    This happened immediately on startup during config processing. Once rsyslog got past this stage, it could not happen.
  • bugfix: build problems on SuSe Linux
    Thanks Andreas Stieger for the patch

rsyslog 7.6.6 (v7-stable) released

This version adresses some bugs and a security issue. Please note that it fixes a potential remote DoS, which may happen for some (non-default) configurations. As such, users are highly encouraged to upgrade to this version.

ChangeLog:

http://www.rsyslog.com/changelog-for-7-6-6-v7-stable/

Download:

http://www.rsyslog.com/downloads/download-v7-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

rsyslog 7.6.5 (v7-stable) released

This released provides an important regression fix, which rendered 7.6.4 unusable, as selector line evaluation was incorrect. Users of 7.6.4 are highly advised to upgrade to this version.

ChangeLog:

http://www.rsyslog.com/changelog-for-7-6-5-v7-stable/

Download:

http://www.rsyslog.com/downloads/download-v7-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

rsyslog 7.6.4 (v7-stable) released

This is a new release for the v7-stable branch. It contains a lot of bug fixes and patches. Several issues have been fixed, thus ensuring better stability and reliability. This is a recommended update for all v7 users.

ChangeLog:

http://www.rsyslog.com/changelog-for-7-6-4-v7-stable/

Download:

http://www.rsyslog.com/downloads/download-v7-stable/

As always, feedback is appreciated.

Best regards,
Florian Riedl

Changelog for 7.6.4 (v7-stable)

Version 7.6.4 [v7.6-stable] 2014-09-12

  • add –enable-generate-man-pages configure switch (default: enabled)
    This forces generation of man pages, even if cached ones exists. This “fixes” a typical release tarball nit. While it is hackish, the benefit is clear given the history of failed tarball releases since we changed the cached man page handling. It was just too easy to get that wrong.
  • removed obsolete –disable-fsstnd configure option
    Thanks to Thomas D. for alerting us.
    Closes: https://github.com/rsyslog/rsyslog/issues/72
  • permits to build against json-c 0.12
    Unfortunately, json-c had an ABI breakage, so this is necessary. Note that versions prior to 0.12 had security issues (CVE-2013-6370, CVE-2013-6371) and so it is desirable to link against the new version.
    Thanks to Thomas D. for the patch. Note that at least some distros have fixed the security issue in older versions of json-c, so this seems to apply mostly when building from sources.
  • new omfile default module parameters
    • filecreatemode
    • fileowner
    • fileownernum
    • filegroup
    • filegroupnum
    • dirowner
    • dirownernum
    • dirgroup
    • dirgroupnum

    Thanks to Karol Jurak for the patch.

  • bugfix: memory leak in TCP TLS mode
  • bugfix: imfile: if a state file for a different file name was set, that different file (name) was monitored instead of the configured one. Now, the state file is deleted and the correct file monitored.
    closes: https://github.com/rsyslog/rsyslog/issues/103
  • bugfix: using UUID property could cause segfault
  • bugfix: mmutf8fix did not detect two invalid sequences
    Thanks to Axel Rau for the patch.
  • bugfix: file descriptor leak with Guardtime signatures
    When a .gtstate file is opened it is never closed. This is especially bad when dynafiles frequently get evicted from dynafile cache and be re-opened again.
  • bugfix: busy loop in tcp listener when running out of file descriptors
    Thanks to Susant Sahani for the patch.
  • bugfix: mishandling of input modules not supporting new input instances
    If they did not support this, accidently the output module part of the module union was written, leading to unpredictable results. Note: all core modules do support this interface, but some contributed or very old ones do not.
  • bugfix: double-free when ruleset() parser parameters were used
    While unlikely, this could cause stability issues even after the config phase.
  • bugfix: output modules with parameters with multiple passing modes could caused strange behaviour including aborts
    This was due to the fact that the action module only preserved and processed the last set passing mode. Note that this was not a problem for the plugins provided by the rsyslog git: none of them uses different passing modes.
    Thanks to Tomas Heinrich for providing a very detailled bug report.
  • various fixes after coverty scan
    These do not address issues seen in practice but those seen by the tool. Some of them may affect practical deployments.
    Thanks to Tomas Heinrich for the patches.
  • bugfix imuxsock: “Last message repeated…” was not emitted at shutdown
    The “Last message repeated…” notice didn’t get printed if rsyslog was shut down before the repetition was broken.
    Thanks to Tomas Heinrich for the patch.
  • bugfix: make dist failed when GUARDTIME or LIBGCRYPT feature was disabled
  • bugfix: mmjsonparse did not build with json-c < 0.10
    This was a regression introduced some time in the past in order to support API changes in json-c. Now we check for the version and use proper code.
  • bugfix: mmanon did not properly anonymize IP addresses starting with ‘9’
    Thanks to defa-at-so36.net for reporting this problem.
    closes: http://bugzilla.adiscon.com/show_bug.cgi?id=529

New 8.4 stable is ready

A new rsyslog v8-stable has been released. It is not just the next iteration of 8.2, instead it will be a new feature release based on the latest 8.3 devel. So please welcome 8.4.

Frequent followers may wonder why 8.4 is ready. Originally, we planned to release it after the summer break. The reason is simple: its ready to come up, albeit with a little less functionality than originally anticipated. Since we were primarily doing maintenance and bug fixing on v8-devel the past couple of weeks, just as it normally happens before a new stable branch comes up. So the code has matured and we decided it was ready to be released as stable. We released 8.4.0 a week ago, and it inherits all the enhancements and fixes of rsyslog 8.3. We hope rsyslog 8.4 fulfils your expectations and provides a flawless logging experience.

Scroll to top