Fedora 27: rsyslog Security Update
Summary
Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL,
syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part,
and fine grain output format control. It is compatible with stock sysklogd
and can be used as a drop-in replacement. Rsyslog is simple to set up, with
advanced features suitable for enterprise-class, encryption-protected syslog
relay chains.
rebase to 8.37.0 ---------------------- - few fixes and enhancements handling
journal input - now requires librelp at least 1.2.16, adding support for setting
address to bind - various other rsyslog core bugfixes and stability fixes
* Wed Aug 8 2018 Jiri Vymazal
- rebase to upstream version 8.37.0
resolves: rhbz#1612079
resolves: rhbz#1598217
resolves: rhbz#1544139
- dropped needless libee dependency
- bumped librelp dependency to actually needed version
* Wed Jul 25 2018 Jiri Vymazal
- fixed a typo in commented-out part of default conf + reordered it
resolves: rhbz#1579592
* Tue Jul 24 2018 Jason L Tibbitts III
- Rebuild for unannounced net-snmp soversion bump.
- Use python3-docutils because rst2man has moved there.
* Mon Jul 23 2018 Jiri Vymazal
- added gcc to buildrequires following f29 system-wide change
* Sat Jul 14 2018 Fedora Release Engineering
- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild
* Mon Jul 2 2018 Jiri Vymazal
- rebase to 8.36.0
- removed stdlog dependency as upstream is going to drop it
- following upstream naming of pidfile
- removed needless conditionals
* Fri Jun 8 2018 Remi Collet
- rebuild with libbson and libmongc 1.10.2 (soname back to 0)
* Mon May 28 2018 Remi Collet
- rebuild with libbson and libmongc 1.10.0
* Thu May 17 2018 Radovan Sroka
- rebase to 8.35.0
* Thu Apr 5 2018 Jiri Vymazal
- rebase to 8.34.0
- added mmkubernetes module
- added fmhttp module
- finished converting rsyslog config to new syntax
- dropped obsolete defattr statements from spec
* Fri Feb 9 2018 Fedora Release Engineering
- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Thu Jan 11 2018 Jiri Vymazal
- rebase to 8.32.0
- now requires higher version of libfastjson
* Thu Dec 14 2017 Radovan Sroka
- added also cyrus-sasl-devel dependency
* Thu Dec 14 2017 Radovan Sroka
- update to 8.31.0
- removed upstreamed patches
- added dependecies mongo-c-driver-devel snappy-devel
- removed depricated dependecies libmongo-client
- mongodb plugin now uses new driver with TLS,...
* Tue Nov 28 2017 Jiri Vymazal
- changed rsyslog-doc to noarch
* Mon Nov 20 2017 Radovan Sroka
- rebuild due to libqpid-proton.so
* Wed Oct 25 2017 Radovan Sroka
- rebuild
* Wed Oct 25 2017 Radovan Sroka
- imjournal didn't work at all
- added imjournal patch for rhbz#1505853
* Mon Oct 23 2017 Radovan Sroka
- rebase to 8.30.0
- added patch that resolves imgssapi compilation errors
* Mon Oct 9 2017 Marek Tamaskovic
- mysql-devel changed for mariadb-connector-c-devel
resolves: rhbz#1493695
- repaired changelog
[ 1 ] Bug #1598217 - rsyslog: Buffer overflow in SanitizeMsg() function in runtime/parser.c [fedora-all]
https://bugzilla.redhat.com/show_bug.cgi?id=1598217
[ 2 ] Bug #1544139 - rsyslogd: imjournal: open on state file `/var/lib/rsyslog/imjournal.state' failed [v8.32.0 try https://www.rsyslog.com/ ]
https://bugzilla.redhat.com/show_bug.cgi?id=1544139
[ 3 ] Bug #1612079 - rsyslog-8.37.0 is available
https://bugzilla.redhat.com/show_bug.cgi?id=1612079
[ 4 ] Bug #1579592 - SELinux is preventing in:imjournal from using the 'dac_override' capabilities.
https://bugzilla.redhat.com/show_bug.cgi?id=1579592
su -c 'dnf upgrade --advisory FEDORA-2018-2818fc5308' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html
All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/security/
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PGNY5YIWUMNC5U2HCH7SVG5TXHDW7ODE/
FEDORA-2018-2818fc5308 2018-08-16 14:55:43.574501 Product : Fedora 27 Version : 8.37.0 Release : 1.fc27 URL : https://www.rsyslog.com/ Summary : Enhanced system logging and kernel message trapping daemon Description : Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up, with advanced features suitable for enterprise-class, encryption-protected syslog relay chains. rebase to 8.37.0 ---------------------- - few fixes and enhancements handling journal input - now requires librelp at least 1.2.16, adding support for setting address to bind - various other rsyslog core bugfixes and stability fixes * Wed Aug 8 2018 Jiri Vymazal - 8.37.0-1 - rebase to upstream version 8.37.0 resolves: rhbz#1612079 resolves: rhbz#1598217 resolves: rhbz#1544139 - dropped needless libee dependency - bumped librelp dependency to actually needed version * Wed Jul 25 2018 Jiri Vymazal - 8.36.0-3 - fixed a typo in commented-out part of default conf + reordered it resolves: rhbz#1579592 * Tue Jul 24 2018 Jason L Tibbitts III - 8.36.0-3 - Rebuild for unannounced net-snmp soversion bump. - Use python3-docutils because rst2man has moved there. * Mon Jul 23 2018 Jiri Vymazal - 8.36.0-2 - added gcc to buildrequires following f29 system-wide change * Sat Jul 14 2018 Fedora Release Engineering - 8.36.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild * Mon Jul 2 2018 Jiri Vymazal - 8.36.0-1 - rebase to 8.36.0 - removed stdlog dependency as upstream is going to drop it - following upstream naming of pidfile - removed needless conditionals * Fri Jun 8 2018 Remi Collet - 8.35.0-4 - rebuild with libbson and libmongc 1.10.2 (soname back to 0) * Mon May 28 2018 Remi Collet - 8.35.0-3 - rebuild with libbson and libmongc 1.10.0 * Thu May 17 2018 Radovan Sroka - 8.35.0-2 - rebase to 8.35.0 * Thu Apr 5 2018 Jiri Vymazal - 8.34.0-1 - rebase to 8.34.0 - added mmkubernetes module - added fmhttp module - finished converting rsyslog config to new syntax - dropped obsolete defattr statements from spec * Fri Feb 9 2018 Fedora Release Engineering - 8.32.0-2 - Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild * Thu Jan 11 2018 Jiri Vymazal - 8.32.0-1 - rebase to 8.32.0 - now requires higher version of libfastjson * Thu Dec 14 2017 Radovan Sroka - 8.31.0-2 - added also cyrus-sasl-devel dependency * Thu Dec 14 2017 Radovan Sroka - 8.31.0-1 - update to 8.31.0 - removed upstreamed patches - added dependecies mongo-c-driver-devel snappy-devel - removed depricated dependecies libmongo-client - mongodb plugin now uses new driver with TLS,... * Tue Nov 28 2017 Jiri Vymazal - 8.30.0-4 - changed rsyslog-doc to noarch * Mon Nov 20 2017 Radovan Sroka - 8.30.0-4 - rebuild due to libqpid-proton.so * Wed Oct 25 2017 Radovan Sroka - 8.30.0-3 - rebuild * Wed Oct 25 2017 Radovan Sroka - 8.30.0-2 - imjournal didn't work at all - added imjournal patch for rhbz#1505853 * Mon Oct 23 2017 Radovan Sroka - 8.30.0-1 - rebase to 8.30.0 - added patch that resolves imgssapi compilation errors * Mon Oct 9 2017 Marek Tamaskovic - 8.29.0-4 - mysql-devel changed for mariadb-connector-c-devel resolves: rhbz#1493695 - repaired changelog [ 1 ] Bug #1598217 - rsyslog: Buffer overflow in SanitizeMsg() function in runtime/parser.c [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=1598217 [ 2 ] Bug #1544139 - rsyslogd: imjournal: open on state file `/var/lib/rsyslog/imjournal.state' failed [v8.32.0 try https://www.rsyslog.com/ ] https://bugzilla.redhat.com/show_bug.cgi?id=1544139 [ 3 ] Bug #1612079 - rsyslog-8.37.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=1612079 [ 4 ] Bug #1579592 - SELinux is preventing in:imjournal from using the 'dac_override' capabilities. https://bugzilla.redhat.com/show_bug.cgi?id=1579592 su -c 'dnf upgrade --advisory FEDORA-2018-2818fc5308' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PGNY5YIWUMNC5U2HCH7SVG5TXHDW7ODE/
Change Log
References