Version 7.6.7 [v7.6-stable] 2014-10-02 bugfix: the fix for CVE-2014-3634 did not handle all cases This is corrected now. See also: CVE-2014-3683 fixed a build problem on some platforms Thanks to Olaf for the patch behaviour change: “msg” of messages with invalid PRI set to “rawmsg” When the PRI is invalid, the rest of the header […]
rsyslog 7.6.7 (v7-stable) released
This is primarily a re-release of 7.6.6 because the patch for the PRI vulnerability was incomplete. Special thanks to “mancha” for notifying us and helping to get it right. For more info, please see: http://www.rsyslog.com/remote-syslog-pri-vulnerability-cve-2014-3683/ Packages are also already available in the package archives. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-7-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, […]
Changelog for 7.6.6 (v7-stable)
Version 7.6.6 [v7.6-stable] 2014-09-30 bugfix: potential abort when a message with PRI > 191 was processed if the “pri-text” property was used in active templates, this could be abused to a remote denial of service from permitted senders see also: CVE-2014-3634 bugfix: potential segfault on startup on 64 bit systems This happened immediately on startup […]
rsyslog 7.6.6 (v7-stable) released
This version adresses some bugs and a security issue. Please note that it fixes a potential remote DoS, which may happen for some (non-default) configurations. As such, users are highly encouraged to upgrade to this version. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-6-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, Florian Riedl
rsyslog 7.6.5 (v7-stable) released
This released provides an important regression fix, which rendered 7.6.4 unusable, as selector line evaluation was incorrect. Users of 7.6.4 are highly advised to upgrade to this version. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-5-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, Florian Riedl
rsyslog 7.6.4 (v7-stable) released
This is a new release for the v7-stable branch. It contains a lot of bug fixes and patches. Several issues have been fixed, thus ensuring better stability and reliability. This is a recommended update for all v7 users. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-4-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, Florian Riedl
Changelog for 7.6.4 (v7-stable)
Version 7.6.4 [v7.6-stable] 2014-09-12 add –enable-generate-man-pages configure switch (default: enabled) This forces generation of man pages, even if cached ones exists. This “fixes” a typical release tarball nit. While it is hackish, the benefit is clear given the history of failed tarball releases since we changed the cached man page handling. It was just too […]
rsyslog 7.6.3 (v7-stable) released
This release offers a couple of bug-fixes and also supports better interaction with librelp 1.2.5, which in turn supports anonymous TLS on platforms like CENTOS/RHEL 6 where GnuTLS is too old and RELP TLS was completely disable previously. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-3-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, Florian Riedl
Changelog for 7.6.3 (v7-stable)
Version 7.6.3 [v7.6-stable] 2014-03-27 add capability to override GnuTLS path in build process Thanks to Clayton Shotwell for the patch support for librelp 1.2.5 Support new return states of librelp 1.2.5 to emit better error messages. For obvious reasons, librelp 1.2.5 is now required. bugfix: ompipe used invalid default template This is a regression from […]
rsyslog 7.6.2 (v7-stable) released
This version introduces the support for librelp 1.2.4, thus it it fixes a problem with librelp in the last release. Note that now librelp 1.2.4 is required as we process it’s new error codes emitted when librelp does not support TLS. ChangeLog: http://www.rsyslog.com/changelog-for-7-6-2-v7-stable/ Download: http://www.rsyslog.com/downloads/download-v7-stable/ As always, feedback is appreciated. Best regards, Florian […]