SUSE-SU-2026:24613-1: critical: Security update for rsyslog

[SLE-SECURITY-UPDATES]

# Security update for rsyslog

Announcement ID: SUSE-SU-2026:24613-1  
Release Date: 2026-11-02T14:39:41Z  
Rating: critical  
References:

  * bsc#1257604
  * bsc#1271910
  * bsc#1272414
  * bsc#1274610
  * bsc#1275926
  * bsc#1281628
  * bsc#1285036
  * bsc#1286162
  * bsc#1286926

  
Cross-References:

  * CVE-2026-19654
  * CVE-2026-61548
  * CVE-2026-78002
  * CVE-2026-92709

  
CVSS scores:

  * CVE-2026-19654 ( SUSE ):  8.2
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-19654 ( SUSE ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-19654 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-61548 ( SUSE ):  8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-61548 ( NVD ):  8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-78002 ( SUSE ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-78002 ( NVD ):  7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
  * CVE-2026-92709 ( SUSE ):  9.2
    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
  * CVE-2026-92709 ( SUSE ):  9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
  * CVE-2026-92709 ( NVD ):  8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

  
Affected Products:

  * SUSE Linux Enterprise Server 16.1
  * SUSE Linux Enterprise Server for SAP Applications 16.1

  
  
An update that solves four vulnerabilities and has five fixes can now be
installed.

## Description:

This update for rsyslog fixes the following issues:

  * CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910).
  * CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a
    stack overwrite (bsc#1272414).
  * CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926).
  * CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by
    untrusted input as a path component without explicit secure-path handling,
    which can lead to arbitrary code execution (bsc#1286926).
  * RainerScript replace() length wrap (bsc#1285036).

Changes for rsyslog:

Upgrade to rsyslog 8.2608.0 (bsc#1257604) * 2026-08-18: imbeats: rearm listener
after failed TLS accept * 2026-08-18: msg: serialize turbo snapshot duplication
* 2026-08-18: omfile: harden dynafile default containment * 2026-08-18: fixup!
omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-02: omfwd: support PKCS#11
URIs with ossl TLS * 2026-07-21: mmkubernetes: reload SA token proactively and
on HTTP 401 * 2026-08-17: devtools: remove Cubic from local validation *
2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount *
2026-08-11: tcpsrv: synchronize session table slots * 2026-08-11: imrelp:
preserve errno across stop signal * 2026-08-12: examples.rst: Missing space in
template * 2026-08-10: mmnormalize: merge debug metadata * 2026-08-08:
normalizers: complete debug test gating * 2026-08-08: normalizers: complete
debug integration * 2026-08-07: mmnormalize, pmnormalize: add liblognorm
debugging * 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead
of crashing * 2026-08-07: runtime: make error-message flag atomic * 2026-07-24:
fuzz: exercise RFC 3164 and RFC 5424 parsers * 2026-08-05: build: unify
indentation in AC_CONFIG_FILES list * 2026-07-25: imfile: fix delay.message
microsecond conversion * 2026-07-24: diskqueue: reject symlinked persisted
segments * 2026-06-23: omfile: control symlink following * 2026-07-25:
mmnormalize: make HUP reload worker-safe * 2026-07-24: docs(agents): add Cursor
Cloud environment setup notes * 2026-07-22: imbeats: harden Lumberjack input
resource handling * 2026-07-23: stringbuf: harden empty string replacement *
2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654
bsc#1271910) * 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the
done: label * 2026-07-21: queue: preserve DA child work during shutdown *
2026-07-21: imtcp: release completed zlib decoder state * 2026-07-09: doc:
clarify JSON array rendering * 2026-07-21: Potential fixes for 5 code quality
findings (#7397) * 2026-07-20: ratelimit: optimize port-based per-source keys *
2026-07-20: imtcp: make zstd window budget configurable * 2026-07-19: imtcp: use
snake case for zstd window tracking * 2026-07-17: imtcp: bound aggregate zstd
decoder window memory * 2026-07-20: statsobj: guard Prometheus escape writes *
2026-07-18: config: do not instantiate actions disabled via config.enabled="off"
* 2026-07-15: queue: document DA engine internals * 2026-07-14: msg: enforce
source-property helper contract * 2026-07-10: ratelimit: remove per-source key
policy hot lock * 2026-07-08: ratelimit: speed source-key shortcuts *
2026-07-15: queue: clarify DA transfer worker role * 2026-07-18: compat_queue:
add missing STAILQ_FOREACH/STAILQ_NEXT fallback * 2026-07-18: rainerscript: warn
on constant AND/OR operand at parse time * 2026-07-18: configure: include
<stddef.h> in the STAILQ detection test * 2026-07-17: mmnormalize: share Turbo
CEE root path check * 2026-07-17: mmnormalize: fall back after Turbo
materialization failure * 2026-07-17: mmnormalize: preserve turbo results across
message boundaries * 2026-07-17: benchmarks: harden comparison and helper inputs
* 2026-07-16: segdisk: optimize CRC accounting and add benchmarks * 2026-07-15:
imjournal: stop invalidation reopen busy-loop * 2026-07-14: queue: harden
segmented DA lifecycle invariants * 2026-07-14: queue: harden DA portability and
startup cleanup * 2026-07-14: queue: address segmented DA review findings *
2026-07-14: queue: stabilize DA shutdown and reload state * 2026-07-14: queue:
clarify lazy marker and legacy state paths * 2026-07-14: queue: gate idle
cleanup on durable intent * 2026-07-14: queue: document empty DA marker
replacement * 2026-07-14: queue: preserve classic state on transient load errors
* 2026-07-14: queue: make idle cleanup restoration crash safe * 2026-07-14:
queue: fail classic DA startup on real errors * 2026-07-14: queue: clarify dirty
DA configuration handling * 2026-07-14: queue: separate DA idle and worker
timeouts * 2026-07-14: queue: document DA auto-upgrade boundary * 2026-07-14:
queue: publish fresh DA markers on first spill * 2026-07-14: queue: constrain
classic DA startup fallback * 2026-07-14: queue: clarify disabled DA idle
timeout * 2026-07-14: queue: preserve classic DA startup fallback * 2026-07-14:
doc: describe segmented disk-assisted queues * 2026-07-14: queue: add segmented
disk-assisted engine * 2026-07-14: queue: retain adopted recovery frontier *
2026-07-14: queue: address segmented disk review findings * 2026-07-13: queue:
wake workers before capacity waits * 2026-07-13: queue: make segmented deletion
resumable * 2026-07-13: queue: initialize missing state in empty spool dirs *
2026-07-13: queue: reject invalid segmented codec field types * 2026-07-13:
queue: avoid sanitized generation wrap * 2026-07-13: queue: expose segmented
disk durability test hooks * 2026-07-13: queue: make segmented disk recovery
lazy * 2026-07-09: queue: rework experimental segmented disk backend *
2026-07-08: imjournal: warn when failing to get the MESSAGE field * 2026-07-08:
omawslogshlc: add CloudWatch Logs HLC output module * 2026-07-08: core: add
systemd READY delay opt-in * 2026-06-02: core/imfile: synchronize sd_notify
READY=1 with module startup * 2026-07-07: ratelimit: shard per-source state *
2026-07-06: docs: validate marked config samples * 2026-07-07: ratelimit: shard
named config registry * 2026-07-06: runtime: harden ratelimit per-source reload
* 2026-07-06: queue: align legacy action batch default * 2026-07-06: runtime:
relax worker-count log reads * 2026-07-06: core: relax selected atomic flag
reads * 2026-07-06: omkafka: relax poll stop flag atomics * 2026-07-06: doc: add
documentation for imfile delay.message parameter * 2026-06-04: core: add generic
output rate limiting * 2026-07-05: omelasticsearch: apply TLS options during
detection * 2026-06-24: omprog: pace transaction retry resumes * 2026-07-02:
runtime: add relaxed 32-bit atomic helpers * 2026-07-02: runtime: fix uint64
atomic fallback return * 2026-07-02: net: match legacy allowed sender hostname
handling * 2026-07-02: runtime: modernize atomic helper usage * 2026-07-02: net:
add modern allowedSender ACLs * 2026-07-02: queue: keep DA child workers alive
while idle * 2026-07-01: runtime: add atomic read load helpers * 2026-07-01:
rainerscript: align hex escape lexer states * 2026-06-30: rainerscript: accept
hex object string escapes * 2026-06-30: runtime: synchronize action retry
shutdown state * 2026-06-30: mmutf8fix: fix replacement sequence examples *
2026-06-16: parser: preserve first sanitize offset with SpaceLF * 2026-06-29:
template: avoid new legacy octal escape * 2026-06-29: Make imptcp-epoll-add-
failure.sh Linux-only * 2026-06-29: Use check_LTLIBRARIES to generate
liboverride__test libraries * 2026-06-29: doc: correct tcp_user_timeout version
marker * 2026-06-23: omhttp: continue after permanent data failures *
2026-06-28: ommail: harden subject template header output * 2026-06-28:
omprog/omstdout: guard empty template LF checks * 2026-06-23: tcp: skip legacy z
after stream decode * 2026-06-26: omelasticsearch: escape bulk metadata values *
2026-06-24: imtcp: bound zstd decoder window * 2026-06-24: mmkubernetes: add
kubernetesurl failover * 2026-06-26: docs: add v8-stable patch-flow skill to
stable branch * 2026-06-26: impcap: bound-check ARP address lengths *
2026-06-26: Initialize devcontainer option state * 2026-06-26: Remove obsolete
Ubuntu 18.04 dev containers * 2026-06-26: Refresh dev container cleanup *
2026-06-26: agent: add v8-stable patch flow skill * 2026-06-26: ChangeLog: split
include-glob follow-up * 2026-06-26: config: keep empty include globs silent *
2026-06-26: gtls: harden DNS SAN byte handling * 2026-06-25: Codify timeoutGuard
testbench invariant * 2026-06-26: imhttp: enforce gzip request body limit *
2026-06-24: imhttp: defensive fixes and auth fallback correction * 2026-06-25:
doc/release: prevent invalid release version manual change * 2026-06-24:
omelasticsearch: add tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups *
2026-06-24: input: warn for rulesets without queues * 2026-06-24: ommongodb:
preserve ISODate fractional seconds * 2026-06-24: imuxsock: clarify missing
Socket diagnostics * 2026-06-24: rsyslogd: reject -o output over input config *
2026-06-24: template: add timereceived property alias * 2026-06-24: imudp: store
received sockaddr length * 2026-06-23: imfile: warn on duplicate file monitors *
2026-06-24: omudpspoof: stop retrying failed fragments * 2026-06-23: gtls: guard
early debug-level lookup (bsc#1274610) * 2026-06-23: statsobj: handle lock
control failures * 2026-06-23: build: avoid empty usertools install dirs *
2026-06-23: imdocker: recover from stale since anchors * 2026-06-23: tcpflood:
add GnuTLS priority string option * 2026-06-23: imjournal: add journal namespace
support * 2026-06-23: prepare for next scheduled stable release cycle *
2026-06-23: doc: clarify omprog transaction mode status * 2026-06-23: errmsg:
enrich oversize errorfile records * 2026-06-23: omelasticsearch: retry read-only
bulk failures * 2026-06-23: doc: clarify fromhost case handling * 2026-06-23:
doc: clarify ommysql data failures * 2026-06-23: omuxsock: isolate action socket
locks * 2026-06-16: template: add octal control character escape * 2026-06-16:
omfwd: add TCP user timeout action option * 2026-06-15: mmutf8fix: support
replacement sequences * 2026-06-09: [Modernization] Replace Internal Backticks
with Shell Expansion: Rscript Batch 1 * 2026-06-08: diag.sh: fix content-
pattern-check and assert-first-column-sum-greater-than * 2026-06-23: imtcp: add
stream compression support * 2026-06-23: docs: add queue-full troubleshooting *
2026-06-22: mmpstrucdata: document structured-data buffer invariant *
2026-06-21: doc: refine object terminator wording * 2026-06-21: doc: clarify
security release handling * 2026-06-21: doc: clarify RainerScript semicolon use
* 2026-06-20: rainerscript: escape embedded NULs at C-string boundary *
2026-06-20: doc: explain service sandboxing for helpers * 2026-06-20: doc:
address service sandboxing review * 2026-06-20: Apply suggested fix to
tools/pmrfc3164.c from Copilot Autofix * 2026-06-19: rainerscript: fold constant
comparisons * 2026-06-18: doc: clarify partial config validation * 2026-06-18:
config: warn on constant boolean operands * 2026-06-17: parser: honor
parseHostnameAndTag in RFC3164 parser * 2026-06-17: core: fix negated exact
priority filters * 2026-06-16: rainerscript: keep random result non-negative *
2026-06-16: rainerscript: add cbool function * 2026-06-16: pmrfc3164: honor
parseHostnameAndTag at runtime * 2026-06-16: msg: invalidate programname when
tag changes * 2026-06-16: imfile: deliver same-file monitors independently *
2026-06-16: glbl: keep debug logfile notice informational * 2026-06-16: doc:
modernize GELF forwarding tutorial * 2026-06-15: ommail: add SMTP mode test *
2026-06-15: mmjsonparse: modernize test output paths * 2026-06-14: parser: add
optional trailing CR stripping * 2026-06-14: ompgsql: accept long server
hostnames * 2026-06-14: dynstats: warn on duplicate bucket names * 2026-06-14:
action: warn on duplicate action names * 2026-06-13: omfwd: use matching atomic
mutex helper * 2026-06-08: Merge pull request #7014 from
rsyslog/cursor/critical-correctness-bugs-480c * 2026-06-05: omazureeventhubs
docs: fix underscored parameters * 2026-06-04: runtime: fix YAML promotion OOM
ownership * 2026-06-04: omuxsock docs: correct template parameter * 2026-06-04:
omhttp: own Splunk profile template names * 2026-06-04: mmjsonparse: reject
boundary trailing data * 2026-06-04: mmdblookup: preserve uint64 values *
2026-06-04: mmdblookup: check uint64 fallback formatting * 2026-06-04: impstats
docs: fix dotted log parameters * 2026-06-04: impstats docs: clarify parameter
name guidance * 2026-06-04: imkafka: stop workers on startup failure *
2026-06-04: imkafka: refine startup stop flag handling * 2026-06-04: doc: match
Sphinx duplicate CLI override handling * 2026-06-04: doc: keep stable git docs
out of dev mode * 2026-06-04: doc: format stable rst_prolog metadata *
2026-06-04: doc: fix database tutorial SQL template option * 2026-06-03: regexp:
avoid per-thread shutdown double-free * 2026-06-03: omkafka: fix NULL topic and
add action name to onDestroy flush logs * 2026-06-03: mmsnareparse: honor
searchWindow in tabbed trailing scan * 2026-06-03: mmsnareparse: cap tab
trailing search by token * 2026-06-03: imfifo: guard absent module config paths
* 2026-06-03: imfifo: bind instances to module config * 2026-06-03: imdiag: fix
stats reporting gate * 2026-06-03: imdiag: avoid checked cond signal while
locked * 2026-06-03: docker: gate collector imtcp module * 2026-06-03: docker:
derive single imtcp enable switch * 2026-06-03: docker: default derived imtcp
switch in collector * 2026-06-02: yamlconf: clean up include recursion guard *
2026-06-02: tls: propagate wolfSSL send-side read retry * 2026-06-02: tls: keep
wolfSSL send retry local * 2026-06-02: tls: bound wolfSSL send-side read retries
* 2026-06-02: sidecar: cap UDP burst buffer by total bytes * 2026-06-02:
runtime: include limits.h for INT_MAX in yamlconf * 2026-06-02: runtime: guard
against recursive YAML includes * 2026-06-02: runtime/queue: reset sizeOnDisk
after safe recovery * 2026-06-02: rainerscript: accept optimizer NOP statements
* 2026-06-02: omkafka: fix HUP deadlock when doAction holds mut_doAction (#7129)
* 2026-06-02: omhttp: avoid retry-ruleset self-stall * 2026-06-02: omhiredis:
fix TLS context error log * 2026-06-02: mmpstrucdata: support custom SD
containers (CVE-2026-61548 bsc#1272414) * 2026-06-02: mmjsonparse: fix find-json
ownership and scan bounds * 2026-06-02: mmjsonparse: clear JSON pointer after
ownership transfer * 2026-06-02: devtools: fold local review experiment into
planner * 2026-06-01: translate: cover script serialization (#7152) *
2026-06-01: dev_env: include lcov in Ubuntu coverage images * 2026-06-01:
ChangeLog: update 8.2606 entries * 2026-06-01: Add parse_time_localtz with
documentation * 2026-05-31: runtime: join final worker after shutdown wait *
2026-05-31: runtime: harden raw message replacement growth * 2026-05-31:
runtime: fix $!all-json serialization locking * 2026-05-31: ratelimit:
centralize per-source enforcement * 2026-05-31: parser: fix NetAddr cleanup on
mask parse errors * 2026-05-31: omclickhouse: report HTTP response errors *
2026-05-31: omclickhouse: document SQL template option * 2026-05-31:
omclickhouse: clean up JSON root on OOM * 2026-05-31: action: avoid committing
suspended retry batches * 2026-05-31: Keep transactional action queue messages
on shutdown * 2026-05-30: rainerscript: add tocef() and cef_ext_escape() for CEF
output * 2026-05-30: doc: clarify queue crash durability limits * 2026-05-30:
devtools: add read-only C format check * 2026-05-29: tls: propagate send-side
receive retry * 2026-05-29: tls: preserve send-side receive retry state *
2026-05-29: tls: preserve send retry without reconnect * 2026-05-29: tls: keep
wolfSSL send-side retry local * 2026-05-29: tls: keep send-side read retries
local * 2026-05-29: template: apply style-check formatting * 2026-05-29: style:
format msg replacement tests * 2026-05-29: runtime: fix msg replace helper CI
failures * 2026-05-29: omkafka: fix suspension not triggered on host resolution
failure * 2026-05-29: omfwd: schedule retry for deferred TCP flush * 2026-05-29:
omfwd: preserve connection on retryable TLS sends * 2026-05-29: omfwd: avoid
tcpclt leak on rebind * 2026-05-29: mmsnareparse: preserve regex end-anchor
semantics * 2026-05-29: imudp: validate listen port formatting * 2026-05-29:
imudp: harden listen port file writes * 2026-05-29: imptcp: simplify compression
auto probe * 2026-05-29: imkafka: support multiple topics in one input()
instance * 2026-05-29: imjournal: warn when newest entry is in the future *
2026-05-29: imjournal: handle clock jumps in future probe * 2026-05-29: docs:
strengthen GHSA prompt guardrails * 2026-05-29: add func
doFunct_ParseTimeLocalTz * 2026-05-29: Update doc/security/ghsa-coordination-
review-template.md * 2026-05-29: Fix rawmsg suffix shift on realloc *
2026-05-29: Fix msg replacement and JSON set handling * 2026-05-29: Apply
suggested fix to tests/mmexternal-response-too-long.sh from Copilot Autofix *
2026-05-28: tls: keep send retry state internal * 2026-05-28: template: reject
invalid regex match selectors * 2026-05-28: template: guard NULL property
rendering * 2026-05-28: packaging: use ETL Vespa env defaults directly *
2026-05-28: packaging: default ETL TLS envs in entrypoint * 2026-05-28:
omelasticsearch: apply clang-format to version probe error * 2026-05-28:
mmjsontransform: fix dotted conflict ownership * 2026-05-28: mmexternal: fix
single-instance reply handling * 2026-05-28: mmexternal: fix EINTR reply
handling * 2026-05-28: mmdblookup: clean up failed worker creation * 2026-05-28:
imuxsock: handle embedded NUL datagrams safely * 2026-05-28: imptcp: harden auto
compression probe * 2026-05-27: tls: preserve recv data during send-side reads *
2026-05-27: tls: avoid recv-helper misuse in send WANT_READ * 2026-05-27: tls:
avoid receive retry state during send * 2026-05-27: template: fix jsonftree flat
fallback framing * 2026-05-27: runtime: reject embedded NULs in mbedtls cert
names * 2026-05-27: runtime: initialize ratelimit mutex once * 2026-05-27:
runtime: guard per-thread regexp iterator allocation * 2026-05-27: runtime: fix
fromhost-port extraction before rcvFrom union swap * 2026-05-27: runtime: clean
up DNS props on port allocation failure * 2026-05-27: runtime-format-regexp-
lifecycle-guards * 2026-05-27: regexp-clean-up-per-thread-entries * 2026-05-27:
packaging: expose Vespa HTTPS toggles * 2026-05-27: packaging: enable HTTPS by
default for ETL Vespa output * 2026-05-27: omusrmsg: enable thread-safe action
ratelimiter * 2026-05-27: omotel: use getProgramName() when deriving app name *
2026-05-27: omotel: avoid const cast for app name extraction * 2026-05-27:
ommysql: handle closed connection before commit * 2026-05-27: omkafka: harden
failed delivery replay paths * 2026-05-27: omhttp: refresh health-check headers
after gzip rebuild * 2026-05-27: omhttp: keep health-check headers uncompressed
* 2026-05-27: omelasticsearch: bound startup version probe response size *
2026-05-27: mmsnareparse: skip full digit runs in event probe * 2026-05-27:
mmsnareparse: preserve anchored trailing regex matches * 2026-05-27:
mmsnareparse: cap regex input in trailing token * 2026-05-27: mmsnareparse:
avoid quadratic provider scans in snare probe * 2026-05-27: mmjsontransform: fix
child ownership on dotted merge conflicts * 2026-05-27: mmjsontransform: clean
up dotted insert ownership * 2026-05-27: mmanon: remove assert on malformed
embedded IPv4 * 2026-05-27: mmanon: make random suffix generation fully
reachable * 2026-05-27: mmanon: build random suffix from byte chunks *
2026-05-27: mbedtls-refine-nul-name-checks * 2026-05-27: mbedtls-apply-cert-
name-style * 2026-05-27: lookup: report active table reloads as pending *
2026-05-27: lmsig-ksi-bound-debug-precision * 2026-05-27: imptcp: serialize
helper work per session * 2026-05-27: imptcp: add stream:auto compression mode *
2026-05-27: imfifo: implement named pipe input module (#7029) * 2026-05-27:
dynstats: coalesce pending persistence writes per bucket * 2026-05-27: dynstats-
unlock-on-task-alloc-failure * 2026-05-27: docker: fix clickhouse configure flag
in Debian 13 dev image * 2026-05-27: doc: use literal markup for TLS parameters
* 2026-05-27: doc: fix shutdown.enable.ctlc spelling in rsyslogd man page *
2026-05-27: doc: fix mmrfc5424addhmac sd_id parameter name * 2026-05-27: doc:
clarify mbedtls requires StreamDriverMode=1 for TLS * 2026-05-27: configure:
detect relpCltSetKeepAlive support * 2026-05-26: stats: avoid notifier teardown
deadlocks * 2026-05-26: runtime: guard optional regexp object lifecycle in tcp
server * 2026-05-26: runtime: bound KSI debug record logging by length *
2026-05-26: runtime: avoid regexp unload double free * 2026-05-26: ratelimit:
avoid double free on helper error paths * 2026-05-26: perctile: reuse counter
cleanup helper * 2026-05-26: perctile: link buckets after initialization *
2026-05-26: ossl: avoid caching OCSP responses past nextUpdate * 2026-05-26:
omazuredce: bound HTTP response buffering * 2026-05-26: omazuredce: avoid gzip
buffer underallocation * 2026-05-26: omazuredce-review-followup * 2026-05-26:
imuxsock: enforce ratelimit.name for credentialed senders * 2026-05-26:
imuxsock-ratelimit-credential-followup * 2026-05-26: impstats: fix double-free
in remote write batching cleanup * 2026-05-26: imkafka: cap split.json.records
fan-out * 2026-05-26: imdocker: keep stream alive on rate-limit drops *
2026-05-26: imdocker: bound multiline segment compaction * 2026-05-26: imdocker:
apply clang-format output * 2026-05-26: configure: avoid leaking -lgcrypt into
global LIBS * 2026-05-25: shellcheck: fix masked test assignments * 2026-05-25:
runtime: validate numeric hardening inputs * 2026-05-25: runtime/nsd_gtls:
validate IP SAN length before conversion * 2026-05-25: parser: verify and fix
offAfterPRI calculation * 2026-05-25: omhiredis: derive TLS server name from
server config * 2026-05-25: omfwd: require peers for targetSrv TLS name auth *
2026-05-25: omfwd: clarify targetSrv TLS auth error * 2026-05-25: nsd_gtls:
preserve SAN-present state for malformed IP SAN * 2026-05-25: imhttp: write
bound listener port to file * 2026-05-25: imdtls: write bound listener port to
file * 2026-05-25: fix(imhiredis): default TLS peer name to configured server *
2026-05-24: tools: make AIX SRC reply copy bounded * 2026-05-24: statsobj: clear
lock flag after prometheus unlock * 2026-05-24: runtime: clamp emulated RFC5424
tag length * 2026-05-24: runtime: avoid post-fork malloc in execProg *
2026-05-24: runtime/statsobj: lock stats list during iteration * 2026-05-24:
nsd_mbedtls: reject RemoteSNI and wire interface * 2026-05-24: nsd_mbedtls: fill
remote port interface methods * 2026-05-24: mmjsontransform: track per-insert
conflicts * 2026-05-24: mmjsontransform: avoid leak on policy insert conflict *
2026-05-24: mmjsonparse: avoid json double-free on add failure * 2026-05-24:
mmexternal: avoid undrained stdout/stderr pipe in output=none mode * 2026-05-24:
mmexternal: address output pipe review findings * 2026-05-24: impstats: harden
overwrite temp file creation * 2026-05-24: imjournal: treat rate-limit discards
as non-fatal in readjournal * 2026-05-24: gssapi: use uint32_t for token wire
length * 2026-05-24: gssapi: fix token length framing endianness in sender *
2026-05-24: fix(tools): guard AIX SRC reply text against NULL * 2026-05-23:
rainerscript: fix array and numeric comparisons on JSON vars * 2026-05-23:
privdrop: update privilege drop comments * 2026-05-23: privdrop: log capability
context on drop failure * 2026-05-23: omelasticsearch: guard dynamic template
strings * 2026-05-23: omelasticsearch: cache action template count * 2026-05-23:
imjournal: restore cursor after recovery reopen * 2026-05-23: imjournal: recover
from stale saved cursor * 2026-05-23: imjournal: harden journal invalidation
recovery * 2026-05-23: imjournal: avoid rotation accounting during recovery *
2026-05-23: docs: clarify local validation gates * 2026-05-23: contrib, runtime:
defensive stability and robustness hardening * 2026-05-23: codex: wire local
container testing hook into agent workflow * 2026-05-22: shell: clean up
ShellCheck findings * 2026-05-22: python: clean up style and add optional checks
* 2026-05-22: net_ossl: document SAN-priority hard-stop on old API * 2026-05-22:
msg: guard MSG replacement offsets (bsc#1272414) * 2026-05-22: mmexternal:
support one-way helpers and response timeouts * 2026-05-22: imptcp: unlink
failed accepted sessions * 2026-05-22: imjournal: fix double-free hazards on
JSON objects * 2026-05-22: imfile: add line-number metadata and soften empty
checks * 2026-05-22: imdocker: terminate compacted multiline buffers *
2026-05-22: imbeats: harden pointer transfer in submitEvent * 2026-05-22:
contrib, plugins: refine pointer hand-off in imhiredis, mmjsonparse, mmsequence
* 2026-05-22: contrib, plugins: defensive pointer hand-off hardening *
2026-05-22: config: warn for unmatched include globs * 2026-05-22: agents:
document optional local linters * 2026-05-21: template: harden property
rendering bounds * 2026-05-21: tcpsrv: guard listener destructors against NULL
references * 2026-05-21: tcps_sess: secure regex memory reallocation and
destructor * 2026-05-21: style: format wolfSSL CRL helper * 2026-05-21: ruleset:
guard synchronous recursive calls * 2026-05-21: rainerscript: harden string and
JSON bounds * 2026-05-21: pm/fm: defensively harden parsing edge cases *
2026-05-21: ossl: enable wolfSSL CRL checks for DER files * 2026-05-21:
net_ossl: avoid CN fallback when SAN priority unsupported * 2026-05-21: mmgrok:
keep configured source immutable * 2026-05-21: lookup: harden shutdown lifecycle
* 2026-05-21: imudp: harden thread lifecycles and fix stats memory leak *
2026-05-21: imtcp: harden listener setup and legacy config cleanup * 2026-05-21:
imjournal: defensive memory safety and stability hardening * 2026-05-21: docs:
codify GHSA coordination workflow * 2026-05-21: docs: clarify GHSA triage scope
* 2026-05-21: docs: add distro component package map * 2026-05-21: docs: add
GHSA coordination template * 2026-05-21: contrib: harden buffer and parser
bounds handling * 2026-05-21: agent: document local CI preflight tiers *
2026-05-21: Update tests/imptcp_uds_unlink.sh * 2026-05-21: Apply suggested fix
to tests/imptcp_uds_unlink.sh from Copilot Autofix * 2026-05-20: ossl: bound
OCSP network reads * 2026-05-20: mmanon: defensively harden IP suffix parsing *
2026-05-20: lookup: reject duplicate table names * 2026-05-20: imptcp: harden
concurrency, boundaries, and memory safety * 2026-05-20: gtls: log peer IP for
missing client cert * 2026-05-20: config: add global maxOpenFiles setting *
2026-05-20: build: fix ARMv7 warnings under Werror * 2026-05-20: agents: add
ChangeLog maintenance skill * 2026-05-20: Update tests/imptcp-discard-truncated-
msg-same-session.sh * 2026-05-20: ChangeLog: update 8.2606 entries * 2026-05-20:
Apply suggested fix to tests/imptcp-discard-truncated-msg-same-session.sh from
Copilot Autofix * 2026-05-20: Apply suggested fix to
doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix
* 2026-05-19: imptcp: discard oversize byte after truncation * 2026-05-18: tcp:
log pre-truncated oversize frames * 2026-05-18: runtime: avoid libgcry IV shift
UB * 2026-05-18: grammar: read pseudo-files in backtick cat * 2026-05-18:
docker: add container regex noise filter * 2026-05-18: doc: remove unavailable
StdJSONFmt reference * 2026-05-18: agents: require available container
validation * 2026-05-18: agents: clarify PR babysitting decisions * 2026-05-18:
ChangeLog: remove duplicate release blocks * 2026-05-18: Apply suggested fix to
doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix
* 2026-05-17: omelasticsearch: document error-file modes * 2026-05-17: doc: list
RFC5424 reserved template * 2026-05-17: doc: clarify omfile timed flush behavior
* 2026-05-17: doc: clarify omfile legacy action separation * 2026-05-17:
containers: update libyaml dev image dependencies * 2026-05-17: containers:
remove stale dev images * 2026-05-17: containers: enable libyaml in Fedora dev
images * 2026-05-17: containers: enable libyaml in CentOS and Debian CI *
2026-05-17: build: honor cross pkg-config for libgcrypt * 2026-05-16:
devcontainer: remove anonymous helper volumes * 2026-05-16: configure: make
libyaml default-on explicit * 2026-05-16: agents: clarify test intent comment
rule * 2026-05-15: ommail: add sendmail delivery mode * 2026-05-15:
omelasticsearch: warn on searchType use * 2026-05-15: imdiag: add module-only
modern config * 2026-05-15: agents: clarify PR babysitting stop condition *
2026-05-15: agents: add issue triage skill * 2026-05-15: Potential fixes for 2
code quality findings (#6909) * 2026-05-14: skills: clarify container validation
escalation * 2026-05-14: omfile: reject failed dynafile pre-opens * 2026-05-14:
net_ossl: fix clang-format style in CRL warning * 2026-05-14: java: use nio
writer in simple plugin skeleton * 2026-05-14: imuxsock: reject contradictory
socket ownership * 2026-05-14: imfile: recover more inotify file updates *
2026-05-14: Update .agent/skills/rsyslog_test/SKILL.md * 2026-05-13: runtime:
add STAILQ fallback for AIX * 2026-05-13: net_ossl: fix CRL stack leak when cert
store is NULL * 2026-05-13: narrow CODEOWNERS ownership * 2026-05-13: imdiag:
add injectmsg delay option * 2026-05-13: devcontainer: quote git common dir
mount * 2026-05-13: agents: document local overlay lookup * 2026-05-13: queue:
add per-queue size.enqueued counter (cumulative bytes) * 2026-05-12: omrelp:
allow TLS auth failure suspension * 2026-05-12: imbeats: multiplex sessions for
high client counts * 2026-05-12: imbeats: harden batch parsing limits *
2026-05-12: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix *
2026-05-12: Apply suggested fix to tests/imptcp-NUL.sh from Copilot Autofix *
2026-05-11: runtime: harden atomic helper fallbacks * 2026-05-11: packaging/rpm:
add rsyslog-imbeats subpackage * 2026-05-11: java: harden skeleton file handling
* 2026-05-11: imbeats: verify raw and amended ES pipeline * 2026-05-11: imbeats:
track cumulative Lumberjack sequences * 2026-05-11: imbeats: tolerate
interrupted poll calls * 2026-05-11: imbeats: test Filebeat to Elasticsearch
pipeline * 2026-05-11: imbeats: harden compressed frame parsing * 2026-05-11:
imbeats: add Elastic Beats input module * 2026-05-11: imbeats: add Elastic Agent
Windows fixture test * 2026-05-11: Apply suggested fix to tools/ompipe.c from
Copilot Autofix * 2026-05-11: Apply suggested fix to tests/syslog_caller.c from
Copilot Autofix * 2026-05-11: Apply suggested fix to runtime/atomic.h from
Copilot Autofix * 2026-05-11: Apply suggested fix to
doc/ai/security_triage_rubric.md from Copilot Autofix * 2026-05-10: imuxsock:
harden trusted property annotation buffer * 2026-05-10: immark: harden runtime
config lifetime * 2026-05-10: doc: add security triage rubric for AI agents *
2026-05-10: [HARDENING] imjournal: harden disk usage stats update * 2026-05-10:
[HARDENING] imdiag: clarify controlled diagnostics usage * 2026-05-09: hardning:
harden config parameter ownership and OOM cleanup * 2026-05-09: config: add
compatibility controls and secure defaults * 2026-05-08: rosi-collector: prevent
Loki 400 queue stalls * 2026-05-08: omdtls: check config string allocations *
2026-05-08: mmrfc5424addhmac: harden SD-ID handling * 2026-05-08: mmleefparse:
check config string allocations * 2026-05-08: imbeats: join session threads
during teardown * 2026-05-08: Fix chkseq EOF handling * 2026-05-07: python: make
file cleanup lexical * 2026-05-07: python: fix external plugin comment typos *
2026-05-07: python: close script file handles * 2026-05-07: imudp: add dynamic
listen port files * 2026-05-07: impstats: remove obsolete svg jquery asset *
2026-05-07: doc: harden docs config AI fixes * 2026-05-07: devcontainer: allow
sudo for mapped users * 2026-05-07: Update doc/source/conf_helpers.py *
2026-05-07: Fix operator precedence in conditions * 2026-05-07: Apply suggested
fix to tests/omfwd-lb-1target-retry-test_skeleton-TargetFail.sh from Copilot
Autofix * 2026-05-07: Apply suggested fix to tests/chkseq.c from Copilot Autofix
* 2026-05-07: Apply suggested fix to doc/source/conf_helpers.py from Copilot
Autofix * 2026-05-06: scripts: restore repo policy helpers * 2026-05-06:
scripts: align module policy evaluator name * 2026-05-06: net_ossl: support
CRL/OCSP revocation on wolfSSL * 2026-05-06: java: simplify simple plugin file
creation * 2026-05-06: impstats: clean up svg jquery findings * 2026-05-06:
impstats: avoid analyzer wildcard import * 2026-05-06: doc: import optional
extensions during probe * 2026-05-06: doc: broaden optional extension probe
errors * 2026-05-06: doc: avoid unused python imports * 2026-05-06: Apply
suggested fix to packaging/docker/rsyslog/standard/Dockerfile from Copilot
Autofix * 2026-05-05: ratelimit: preserve severity sentinel on s390x *
2026-05-05: imtcp: wait for mbedtls diagnostics in tests * 2026-05-05: imtcp
test: capture mbedtls diagnostics directly * 2026-05-05: Add Ubuntu WSL
development setup * 2026-05-04: improg: stop on child stdout EOF * 2026-05-04:
github action: remove issue labler * 2026-05-04: codeql: silence unused global
findings * 2026-05-04: codeql: add explicit Python fallbacks * 2026-05-04: Apply
suggested fix to runtime/datetime.c from Copilot Autofix * 2026-04-30: ossl:
match PermittedPeer wildcards against cert identities * 2026-04-30: Fix omrelp
TLS auth failure CPU spin * 2026-04-29: packaging/rpm: Add omotel OpenTelemetry
Sub-package * 2026-04-28: packaging: add multi-arch container release publishing
* 2026-04-28: Fix RFC3339 formatting for high-precision secfrac * 2026-04-25:
queue: quarantine runtime disk corruption safely * 2026-04-25: imfile test:
stabilize async logrotate drain * 2026-04-25: Add security policy * 2026-04-24:
imhttp: harden request parsing and cleanup (#6758) * 2026-04-24: imdocker:
stabilize image-name test * 2026-04-23: omuxsock: fix message loss bug for
connected Unix domain sockets (#6750) * 2026-04-23: imfile: release deleted-file
FDs after FILE_DELETE_DELAY in inotify mode * 2026-04-23: .codex: restore
wrapped git commit hook matching * 2026-04-22: omusrmsg: guard empty systemd
session lists * 2026-04-22: omfwd: avoid recursive target teardown * 2026-04-22:
fmhash: fix build issue * 2026-04-22: doc: update modules documentation (#6714)
* 2026-04-21: prepare for next scheduled stable release cycle * 2026-04-20:
style: format obj helper declaration * 2026-04-20: style: drop redundant cstr
null checks * 2026-04-20: queue: harden corrupt disk queue recovery *
2026-04-20: queue: delete orphaned disk queue write files * 2026-04-20: prepare
for 8.2604.0 release * 2026-04-20: omfwd: flush pending data before zip teardown
* 2026-04-20: imptcp: harden stream compression handling * 2026-04-20: doc:
shrink ROSI architecture image in dist * 2026-04-19: imfile: harden state file
handling * 2026-04-19: core: harden string allocation and copy handling *
2026-04-18: omotel: ignore generated protobuf tree * 2026-04-18: imkafka: harden
worker startup and teardown * 2026-04-18: imhiredis: place stream index helper
before use * 2026-04-18: imhiredis: harden stream index parsing and setup *
2026-04-18: imdocker: harden setup and URL construction * 2026-04-18:
imdocker,imhiredis: fix curl teardown and style * 2026-04-17: imudp,imdtls:
harden listener setup paths * 2026-04-17: imdtls: disable failed listeners
cleanly * 2026-04-17: gssapi: fix token timeout handling * 2026-04-17: gssapi:
fix interrupted token io loops * 2026-04-17: doc: clarify severity-aware shared
ratelimit use * 2026-04-16: imjournal: harden state file handling * 2026-04-16:
im3195: harden RFC3195 callback handling * 2026-04-16: gssapi: improve
robustness and listener handling * 2026-04-15: runtime: harden queue config and
worker handling * 2026-04-15: omfile: harden dynafile cache validation *
2026-04-15: omfile: address review follow-up cleanups * 2026-04-14: omrelp: use
stable data in librelp callbacks * 2026-04-14: omrelp: use generic code in onErr
* 2026-04-14: omfwd: support musl resolver APIs * 2026-04-14: omelasticsearch:
fix port detection for IPv6 server addresses * 2026-04-14: imhttp: add route-
scoped API key authentication * 2026-04-14: configure: reduce resolver link
probe * 2026-04-14: configure: link resolver libs on solaris * 2026-04-14:
configure: gate omfwd resolver APIs * 2026-04-13: runtime: add watched policy
reload scheduling * 2026-04-13: ratelimit: free dropped TCP messages on helper
errors * 2026-04-13: [Modernization] Replace Internal Backticks with Shell
Expansion: Misc test files * 2026-04-13: Add missing mmdb files to
tests/Makefile.am * 2026-04-12: runtime: cleanup zero-size alloc handling *
2026-04-12: rsconf: clarify stale loadConf comments * 2026-04-12: ratelimit:
keep TCP batch processing on drops * 2026-04-12: omhttp: harden payload length
handling * 2026-04-12: imuxsock: bound per-pid ratelimiter cache * 2026-04-12:
imtcp: harden limit validation and worker shutdown * 2026-04-12: impstats: clean
up minor report nits * 2026-04-12: fix(imtcp): fix typos and remove duplicate
assignments in imtcp.c * 2026-04-12: Fix for Unused import * 2026-04-12: Fix for
File is not always closed * 2026-04-11: add compression option with new test and
changed request building * 2026-04-09: runtime: harden stringbuf contains
matching * 2026-04-09: runtime: harden TCP framing size handling * 2026-04-08:
mmutf8fix: also fix invalid UTF-8 in RFC 5424 structured data * 2026-04-07:
ratelimit: watch YAML policy files with debounce * 2026-04-06: [Modernization]
Replace Internal Backticks with Shell Expansion * 2026-04-06: Discard partial
map/array objects on error * 2026-04-04: doc: document omfwd connection
statistics * 2026-04-03: runtime: map common legacy selector actions to YAML *
2026-04-03: runtime: harden YAML string-node OOM handling * 2026-04-03: runtime:
emit structured YAML for simple translations * 2026-04-03: grammar: fix YAML
script buffer filename leak * 2026-04-02: runtime: add config translation mode *
2026-03-31: omelasticsearch: suspend action on 5xx or 429 HTTP status codes *
2026-03-31: omelasticsearch: check HTTP status code in checkConn health check *
2026-03-31: [build]: require OpenSSL if imdtls or omdtls is used * 2026-03-30:
mmjsontransform: reload transformation mode from policy * 2026-03-30:
mmjsontransform: add YAML policy processing * 2026-03-30: build: stop shipping
.gitignore files * 2026-03-30: [codex] doc: fix random sampling example (#6678)
* 2026-03-30: [General]: Install tzdata in default docker image * 2026-03-30:
Fix DoS in imjournal sd_journal_wait * 2026-03-29: doc: remove stray merge
marker in deployments index * 2026-03-29: doc: clarify YAML positioning and
workflow guidance * 2026-03-28: yamlconf: warn on duplicate top-level keys,
document as unsupported * 2026-03-28: scripts: add doc-xref-sync linter check
for broken :doc: references * 2026-03-28: doc: register design_decisions.rst in
EXTRA_DIST * 2026-03-28: doc(yamlconf): fix EXTRA_DIST entry and cross-reference
path * 2026-03-28: doc(yamlconf): add architecture doc, expand RainerScript
relation * 2026-03-28: doc(yaml_config): add version requirement note
(8.2604.0+) * 2026-03-28: doc(conf_formats): use FmtYamlName macro, fix macro-
in-bold issue * 2026-03-28: doc(conf_formats): add YAML as fourth format option,
cross-link pages * 2026-03-27: test(yaml-unset): guard against false pass when
verify file is absent * 2026-03-27: refactor(yamlconf): extract nvlst helper,
add Doxygen, fix test coverage * 2026-03-27: feat: add YAML as an alternative
configuration format * 2026-03-27: docs(agents): add rsyslog_config skill and
config parity guidance * 2026-03-27: doc(yamlconf): improve completeness of YAML
config reference * 2026-03-27: doc(yamlconf): fix malformed RST grid table (Set
row off by one space) * 2026-03-27: devtools: add repo-local Codex commit hook *
2026-03-26: feat: add YAML as an alternative configuration format * 2026-03-26:
feat(yamlconf): add filter/actions shortcut for rulesets * 2026-03-25: omhttp:
reuse curl handles and coordinate health checks * 2026-03-25: omhttp: fix shared
health state and gzip headers * 2026-03-24: gtls: check CRL expiration, reject
connections with expired CRL * 2026-03-23: doc: imptcp: remove outdated
16-thread limit note * 2026-03-21: doc/container: mark ETL image experimental *
2026-03-20: update doc url in README.md * 2026-03-20: doc: sync container docs
with current images * 2026-03-20: doc: fix ROSI link audience in overview pages
* 2026-03-19: doc: link ROSI references to overview page * 2026-03-19: doc:
improve ROSI navigation and scope notes * 2026-03-19: doc: broaden ROSI framing
beyond collector * 2026-03-18: doc: document Windows clients in ROSI Collector *
2026-03-18: doc: add ROSI stack deployment tutorial * 2026-03-16: omfwd: add
num.connects statistic for TCP connection tracking * 2026-03-16: imfile:
preserve symlink cleanup notifications with deferred destroy * 2026-03-16: core:
Fix typos in comments * 2026-03-13: doc: Fix Mermaid diagrams and unify build
output to build/ * 2026-03-11: tls: add native post-quantum guidance and tests *
2026-03-11: packaging: add Ubuntu package build CI for focal, jammy, noble *
2026-03-10: docs: clarify PrioritizeSAN fallback behavior and auth mode
prerequisite * 2026-03-10: Add azure Monitor API ingestion module * 2026-03-04:
Use suggested error handling when node becomes NULL mid-loop * 2026-03-04:
Remove "ifdef json_type_uint64" * 2026-03-04: Discard partial map/array objects
on error * 2026-03-04: Add uint64 handling if it is supported * 2026-03-03: rpm:
packaging overhaul, CI job, and review fixes * 2026-03-02: imjournal
documentation: FileCreateMode was introduced in v8.2306.0 * 2026-03-02: docs:
remove -c5 from troubleshooting example * 2026-02-27: Revert "docs: Add ROSI
Collector Hetzner Cloud tutorial" * 2026-02-26: ratelimit: wire ratelimit.name
into remaining modules * 2026-02-26: omusrmsg: add ratelimit support *
2026-02-26: omkafka: add poll thread; fix races and deprecated usleep *
2026-02-26: imrelp: add ratelimit support (interval, burst, name) * 2026-02-26:
Stop all outer recursive loops in MAP case on corrupted data * 2026-02-26: Skip
truncated field * 2026-02-26: Replace Variable-Length Array with fixed sized one
* 2026-02-26: Address style/formatting issues * 2026-02-26: Add json NULL checks
* 2026-02-25: packaging: Update RHEL Docker Build Image * 2026-02-25: omotel:
add native protobuf encoding (http/protobuf) * 2026-02-25: docs: Add ROSI
Collector Hetzner Cloud tutorial * 2026-02-25: doc: add deterministic HTML link
validation in docs CI * 2026-02-25: Update mmdblookup so it does not rely on
JSON dump * 2026-02-24: doc: fix stale relative links causing malformed paths *
2026-02-24: doc: bump footer copyright year to 2026 * 2026-02-24: doc: add ROSI
guides and beginner infographic * 2026-02-24: Codex/process GitHub issue 4697
(#6582) * 2026-02-23: runtime: close worker-start cancellation race *
2026-02-22: doc: update canonical location for doc set * 2026-02-18: tools: fix
linking issue with libyaml * 2026-02-18: runtime: refactor dynstats meta-counter
name assembly * 2026-02-18: prepare for next scheduled stable release cycle *
2026-02-18: doc: fix release_string_detail NameError, narrow deploy to main only
* 2026-02-18: doc: add GitHub Actions workflow to deploy docs with GA to Pages *
2026-02-18: doc: add GA support with input validation and fallback (#6561) *
2026-02-18: core: expand checked literal copies across fixed buffers *
2026-02-17: doc: add optional Google Analytics via sphinxcontrib-googleanalytics
(#6559) * 2026-02-17: ChangeLog: correct overhyped feature * 2026-02-17:
ChangeLog: add missing entry * 2026-06-23: bump version number for scheduled
stable release * 2026-02-16: configure: default-enable impstats push build
support (#6542) * 2026-02-16: better handle copy of constant string to ip
address buffer (#6557) * 2026-02-13: imjournal: fix stats counter type for
uint64 fields * 2026-02-13: doc: restructure impstats reference for clearer
modes * 2026-02-13: doc: expand impstats push docs and FAQ coverage *
2026-02-13: doc: describe impstats push mode for VictoriaMetrics * 2026-02-13:
doc: add impstats VictoriaMetrics push tutorial * 2026-02-11: runtime: iterate
ptcp addresses and validate bind device * 2026-02-11: feat(rosi-collector):
impstats sidecar on server, Grafana rate limits, docs * 2026-02-08:
packaging/docker: trim ubuntu24 image build artifacts * 2026-02-08: omhttp: add
VictoriaLogs jsonline CI test * 2026-02-08: curl modules: pass long literal to
CURLOPT_POST * 2026-02-06: omhttp: reuse reply buffer with cap and safer sizing
* 2026-02-06: github action security follow up (#6532) * 2026-02-06: build:
normalize object prototypes and remove decl noise * 2026-02-04: Sentinel: Fix
buffer overflow risk in datetime formatting * 2026-02-04: doc: fix conflict
markers in omhdfs-omhdfsport.rst * 2026-02-04: Fix infinite loop in re_extract
when regex matches empty string * 2026-02-04: Codex/fix issue #6517 in rsyslog
(#6520) * 2026-02-03: runtime: lower internal message rate defaults *
2026-02-03: rosi-collector: add Syslog Health (impstats) dashboard and client
sidecar * 2026-02-03: doc: improve sparseArray doc and suggest is_in_subnet *
2026-02-03: doc/ommail: correct CRLF escaping; bind body template * 2026-02-03:
Fix lookup table reload race condition (Device or resource busy) * 2026-02-03:
Fix build failure with OpenSSL 3.4.3+ due to deprecated ENGINE API * 2026-02-03:
Codex/add documentation for pcre matching (#6509) * 2026-02-02: runtime: include
IPv6 scope id in DNS cache keys * 2026-02-01: ossl: make OCSP requests non-
blocking with caching * 2026-01-31: runtime: fix srUtilItoA() data type
inconsistencies * 2026-01-31: impstats: add VictoriaMetrics push via Remote
Write * 2026-01-30: stream: lock open/init and defer error log * 2026-01-30:
runtime: call class exit on lib unload * 2026-01-30: nsd_ossl: abort failed
handshakes * 2026-01-29: runtime: clarify atomic helper usage * 2026-01-29:
queue: fix slow drain of disk-assisted queues * 2026-01-29: queue: fix DA worker
infinite loop regression from commit 4748c5746 * 2026-01-29: imkafka: add JSON
batch splitting for Azure Event Hub * 2026-01-29: fix(obj): use best-effort
atomics for ifIsLoaded to eliminate TSAN warnings * 2026-01-28: omfile: pass
size-limit file to rotate cmd * 2026-01-28: configure: fix xxhash library check
missing error action * 2026-01-25: imtcp: add MultiLine and regex framing
support * 2026-01-25: SQUASH: some fixes * 2026-01-24: template: add omitIfZero
option to property() * 2026-01-24: agent/skills: standardize test registration
and mock check * 2026-01-23: tools: honor main_queue name override * 2026-01-23:
skills: implement extended documentation distribution check * 2026-01-23:
fix(tools): graceful exit on recvfrom error in wait_timeout * 2026-01-23: doc:
refine memory auditor guidelines with CHKmalloc and NULL checks * 2026-01-23:
core: streamline agent instructions with modular skills * 2026-01-23: action:
add batchesprocessed pstats counter * 2026-01-22: imfile: add inode generation
check for file rotation detection * 2026-01-21: sidecar: add rsyslog impstats
exporter * 2026-01-19: ossl: add OCSP certificate revocation checking support *
2026-01-17: nitfix: add output files to .gitignore * 2026-01-17: imfile: add
inotify fallback rescans on watch limits * 2026-01-17: doc: add imfile new
parameter doc * 2026-01-16: queue: harden disk recovery after invalid .qi *
2026-01-16: core: fsync+atomic rename for pid file; abort on failure *
2026-01-16: build: move doc EXTRA_DIST into doc/Makefile.am * 2026-01-15:
mmanon: add retry limit + fallback for unique randomization (#6444) *
2026-01-14: Improve test infrastructure: fix core dump race condition *
2026-01-13: fix pmlastmsg.c typo error * 2026-01-13: docs: Add Core Philosophy
page * 2026-01-13: doc: deprecate omruleset; add call migration guide *
2026-01-12: rainerscript: add is_in_subnet() built-in * 2026-01-12: omhiredis:
remove unneded param name from param table * 2026-01-12: omfile: fix
pszSizeLimitCmd leak; own copy from outchannel * 2026-01-12: nitfix: code style
* 2026-01-12: imfile: guard statefile unlink and honor RMStateOnMove *
2026-01-12: doc: imhttp: document ability to bind to specific IP addresses *
2026-01-12: doc: add FAQ about blocking actions and queues * 2026-01-12: core:
make action state changes output better debug info * 2026-01-09: action: guard
worker instance check on non-atomic builds * 2026-01-09: Fix: Use __has_include
to check for rabbitmq-c headers * 2026-01-09: Fix imjournal test race condition
with parallel execution * 2026-01-08: contrib/imczmq,omczmq: add CZMQ 4.2+
version guards * 2026-01-07: runtime: fix race condition in worker thread
cancellation * 2026-01-07: runtime: fix inconsistent synchronization of
iCurNumWrkThrd * 2026-01-07: runtime: fix TOCTOU race in worker thread creation
* 2026-01-07: omsnmp: fix legacy config path and session strings * 2026-01-06:
runtime: fix race condition in worker thread startup * 2026-01-06: runtime: fix
critical data race in wtpSetState() * 2026-01-06: lmsig_ksi: remove unused
REPORT_PARAM_MISSING macro * 2026-01-06: Fix mmsnareparse test data files
missing in make dist * 2026-01-05: tcpflood: nitfix w/ compiler warning when
DTLS is not configured * 2026-01-05: rainerscript: add split() function *
2026-01-05: doc: optimize agent build instructions for efficiency * 2026-01-05:
doc: add sparseArray lookup IPv4 subnet matching example * 2026-01-05: core/AIX:
fix an hard exit() on certain failure at AIX * 2026-01-05: Refactor duplicate
string copy logic in msg.c * 2026-01-05: Refactor Prometheus stats generation to
a separate function * 2026-01-04: queue: re-implement queue size warnings *
2026-01-04: doc: imrelp: clarify missing MaxSessions and session stats (#6414) *
2026-01-03: runtime/ratelimit: annotate ratelimit nonnull contracts *
2026-01-02: tcpsrv: restore default stack size assignment * 2026-01-02:
runtime/nsd_ossl.c: fix authmode authorization bypass * 2026-01-02: integer
parsing more robust * 2026-01-01: core, runtime, omfwd: plumb action name into
modules and logs * 2025-12-31: core: improve some important inline documentation
* 2025-12-30: omelasticsearch fix: potential NULL dereference * 2025-12-30: msg,
docs: document jsonMerge overwrite; drop TODO * 2025-12-30: imjournal: make
PRIORITY parsing robust and quiet * 2025-12-29: ratelimit: add named policies;
wire into imtcp/imptcp * 2025-12-29: docs: add module template and tighten RST
AI authoring rules * 2025-12-29: build: add missing doc files to EXTRA_DIST *
2025-12-28: ossl: fix ctx double-free and config string leaks * 2025-12-28:
omkafka fix: double-free of kafkaheader if used * 2025-12-28: imjournal: remove
unused ctrPollFailed * 2025-12-27: Add rsyslog-doc AI assistant prompt and
update meta-docs * 2025-12-26: Update tests/omfwd_rebind_udp.sh * 2025-12-25:
runtime/rsksi: check KSI_DataHash_extract return values * 2025-12-25:
Architectural Analysis of Rsyslog Core (#6390) * 2025-12-24: rainerscript:
ensure parse_json consumes entire input string * 2025-12-24: rainerscript: add
split() function * 2025-12-24: omfwd: fix RebindInterval suspension and improve
UDP cleanup * 2025-12-24: docs: refactor AGENTS.md for agent clarity, safety,
and precision * 2025-12-23: rainerscript: ensure parse_json consumes entire
input string * 2025-12-23: fix improper ":json:" use * 2025-12-23: doc: fix
version (accidentally not updated) * 2025-12-23: Update
doc/source/reference/parameters/omudpspoof-template.rst * 2025-12-22: nitfix:
code style violations * 2025-12-22: netstream ossl driver: small fix in meta
information * 2025-12-22: doc: add RAG Knowledge Base extraction and build
integration * 2025-12-21: docs: formalize defensive coding and assertion
patterns * 2025-12-21: doc: modernize and expand queue concept documentation *
2025-12-21: doc: fix missing EXTRA_DIST entry * 2025-12-19: rsyslog-ossl:
Prevent double close of socket fd * 2025-12-19: impstats: add log.file.overwrite
parameter for atomic overwrites * 2025-12-19: doc: update agent guidelines to
require documentation for new parameters * 2025-12-17: omudpspoof: update
RainerScript examples * 2025-12-17: imjournal: fix potential segfault (SIGBUS) *
2025-12-17: doc: fix RST syntax errors in parameter documentation * 2025-12-17:
Remove macos-13 from CI and weekly jobs * 2025-12-17: Fix doc build CI security,
spelling, and RST build errors * 2025-12-16: omudpspoof: fix module template
example * 2025-12-16: Refactor: rename omotlp module to omotel * 2025-12-15:
doc: unify mmanon random-consistent-unique text * 2025-12-15: Add support
healthchecktimedelay into omhttp * 2025-12-11: omudpspoof: split parameter docs
into reference pages * 2025-12-11: omudpspoof: correct parameter scopes in
references * 2025-12-11: omudpspoof: align parameter casing with camelCase
guidance * 2025-12-11: omsnmp: align parameter heading with module scope (#6354)
* 2025-12-11: Codex/refactor rsyslog parameter documentation n6uh16 (#6345) *
2025-12-11: Codex/refactor module parameter documentation atexhg (#6355) *
2025-12-11: Codex/refactor module parameter documentation (#6349) * 2025-12-11:
Codex/refactor module documentation into parameter files (#6348) * 2025-12-05:
prepare for next daily stable cycle * 2025-12-05: omdtls: fix incorrect usage of
gai_strerror * 2025-12-05: mmjsontransform: fix compiler warning * 2025-12-05:
core: fix LogError(0, ...) anti-pattern and add guidelines * 2025-12-05: build:
fix missing test files in dist tarball * 2025-12-04: omhiredis: Allow to define
a name to instance and use it in logs * 2025-12-04: doc: fix some small glitches
* 2025-12-03: packaging/docker: add TLS support to collector image * 2025-12-03:
mmanon: better document externalized function part * 2025-12-03: docs: clarify
coding practices path in prompts * 2025-12-03: docs: add assert-plus-fallback
helper guidance * 2025-12-03: docker/collector: always load imtcp module *
2025-12-03: doc: handle backslash continuations in rsyslog lexer * 2025-12-03:
doc: add contract pattern for externalized helpers * 2025-12-02: mmanon: fix
spacing for format * 2025-12-02: doc: fix omlibdbi parameter examples *
2025-12-02: New functionality for omuxsock (#5630) * 2025-12-01: omuxsock
documentation changes * 2025-12-01: mmanon: tidy inline comments * 2025-12-01:
imtcp: add NetworkNamespace * 2025-12-01: Codex/refactor rsyslog parameter
documentation 8z2p3x (#6327) * 2025-11-30: omfwd: add DNS SRV discovery
(targetSrv) * 2025-11-28: feat(deploy): add ROSI Collector centralized log
collection stack * 2025-11-28: Codex/refactor rsyslog parameter documentation
(omjournal) (#6309) * 2025-11-26: doc: add TLS example for omelasticsearch *
2025-11-25: mmsnareparse: make regex trailing search limit configurable *
2025-11-25: mmanon: fix races in IPv4 trie and IPv6 hash access (#6315) *
2025-11-25: doc: add SETUP, BUILD, TEST agent task keywords * 2025-11-25:
Codex/refactor rsyslog module parameter documentation wnkysy (#6311) *
2025-11-24: mmsnareparse: add parameter ignoreTrailingPattern.regex *
2025-11-21: mmsnareparse: add ignoreTrailingPattern parameter * 2025-11-21:
build: Add code coverage targets * 2025-11-18: doc: some nitfixes to historical
doc * 2025-11-18: doc: add conceptual model summaries * 2025-11-18:
Codex/refactor omdtls documentation for parameters (#6298) * 2025-11-17:
mmsnareparse: add Sysmon event support via JSON definition file * 2025-11-17:
doc: add json-ld (basic schema) (#6303) * 2025-11-14: doc: restructure and
modernize project history; add origins page and xrefs * 2025-11-14: container:
add libyaml to some dev containers * 2025-11-14: Fix: Remove stray/unwanted
'rsyslog' subproject * 2025-11-14: Codex/refactor rsyslog module documentation
parameters (#6296) * 2025-11-12: omhttp - Add two profile for Splunk HEC (#6150)
* 2025-11-12: fix codestyle issue (minor) * 2025-11-12: Codex/refactor rsyslog
parameter documentation fvn43p (#6290) * 2025-11-12: Codex/refactor rsyslog
module parameter documentation omgssapi (#6294) * 2025-11-09: doc: add FAQ if
rsyslog runs on windows * 2025-11-07: Implement Kafka Metrics, new pstats format
(#6154) * 2025-11-06: fix typo in European mirror link (https vs. http) *
2025-11-06: doc: clarify release channels in versioning guide (#6289) *
2025-11-05: doc: add release version number semantic info (#6286) * 2025-11-05:
Codex/refactor rsyslog module parameter documentation s7jgy3 (#6277) *
2025-11-05: Codex/refactor rsyslog module parameter documentation p47sz4 (#6285)
* 2025-11-05: Codex/refactor rsyslog module parameter documentation khpye2
(#6276) * 2025-11-05: Codex/refactor rsyslog module parameter documentation
bn356b (#6287) * 2025-11-05: Codex/refactor rsyslog module documentation b6q3fv
(#6281) * 2025-11-04: feat(imhiredis): Add support for TLS in imhiredis (#21) *
2025-11-03: nsd_gtls: fix repeated warnings on connection retry + test *
2025-11-03: content_count_check: use optional file argument if provided *
2025-11-03: README.md Updates for clarity and content (#6282) * 2025-11-03:
Enhance README with Table of Contents and new sections (#6283) * 2025-10-31:
tcpsrv: stop workers before destruction * 2025-10-31: PoC: rsyslog ETL pipeline
container for sending to vespa.ai * 2025-10-30: omhttp - Stats by destination
server (#6141) * 2025-10-30: Fix typos: corrected 'intial' to 'initial' and
'intialize' to 'initialize' * 2025-10-30: Codex/refactor rsyslog module
parameter documentation rgp0jv (#6256) * 2025-10-30: Codex/refactor module name
parameters documentation (#6250) * 2025-10-30: Add support for TLS in omhiredis
(#17) * 2025-10-29: omelasticsearch: add apikey authentication * 2025-10-29:
doc: fix trailing whitespace in man pages * 2025-10-29: doc: add faq entry for
rsyslog as etl tool (#6272) * 2025-10-29: doc: add FAQ for sending data to
vespa.ai * 2025-10-24: doc/build: ship vendor/tools; make sitemap opt-in *
2025-10-24: action.c: reordered actionDestruc * 2025-10-23: doc: enable sphinx
sitemap generation for html output * 2025-10-22: doc: vendor mermaid assets and
fix offline viewing * 2025-10-22: doc: update SIGINT signal documentation in man
page * 2025-10-20: doc: make git optional for Sphinx builds (dist tarballs) *
2025-10-20: doc: enable parallel Sphinx builds; silence edit_on_github *
2025-10-17: Add doc for mbedtls driver * 2025-10-15: bump version number for
8.2512 series * 2025-10-15: Doc: Minor spelling and typing mistakes (#6242) *
2025-10-15: Codex/refactor rsyslog imklog module parameter documentation (#6246)
* 2025-10-13: Codex/refactor parameter documentation for imkafka (#6243) *
2025-10-11: core: stop busy-loop when action disables itself * 2025-10-11: Add
MbedTLS netstream driver. * 2025-10-10: Codex/refactor rsyslog imgssapi module
parameter documentation (#6239) * 2025-10-10: Codex/refactor rsyslog imdiag
module parameter documentation (#6235) * 2025-10-09: prepare for 8.2510.0
scheduled stable release * 2025-10-09: ossl bugfix: ensure peer cert is freed in
osslChkPeerAuth * 2025-10-09: omotlp: introduce OTLP/HTTP log exporter *
2025-10-07: mysql: stabilize async ommysql workers via proper thread init *
2025-10-07: imptcp: fix null pointer dereference in error logging * 2025-10-07:
docs: add Agent Chat Keywords to AGENTS.md * 2025-10-06: feat: Trigger macOS
workflow on relevant file changes * 2025-10-06: doc: im prove log pipeline
documentation * 2025-10-06: doc: clarify reliable forwarding examples *
2025-10-06: Fix: Make RSYSLOG_DYNNAME generation POSIX-compliant * 2025-10-05:
doc: refresh database and PRI tutorials * 2025-10-05: doc: improve mmjsonparse
documentation * 2025-10-05: Codex/refactor rsyslog parameter documentation
68okf4 (#6219) * 2025-10-04: mmjsonparse: add find-json mode for embedded JSON *
2025-10-04: Codex/refactor rsyslog module documentation (#6215) * 2025-10-04:
CI,DIST: build docs from 'make dist' tarball * 2025-10-02: test: Enable Valgrind
for manytcp-too-few-tls-vg.sh * 2025-10-02: Increase message loss tolerance in
TargetFail test * 2025-10-01: template: fix lenStr for subtree rendering *
2025-10-01: mmjsontransform: add experimental JSON dotted-key (un)flatten *
2025-09-29: omkafka: restore producev fallback for older librdkafka *
2025-09-29: omelasticsearch: implement target platform check (#6197) *
2025-09-29: mmexternal: split parameter in doc (#6193) * 2025-09-29: imtcp:
Improve peer logging to include source ports (#6198) * 2025-09-29: CI
containers: include mbedtls test environment * 2025-09-28: imdiag/tests/docs:
use RFC5737 test IP in samples * 2025-09-28: Codex/refactor parameter
documentation for mmjsonparse (#6189) * 2025-09-27: doc: split property
documentation into separate files * 2025-09-26: docs: add agent guides and
module metadata scaffolding * 2025-09-26: mmanon: split parameter docs into
reference * 2025-09-25: omelasticsearch: omit _type by default; use typeless
endpoint * 2025-09-25: doc: update imjournal journald warning * 2025-09-24:
template: add jsonftree option for nested jsonf output * 2025-09-24: mmfields:
split parameter docs into reference pages * 2025-09-23: omusrmsg bugfix:
potential null pointer dereference causes segfault * 2025-09-23: omfile: enable
addLF by default * 2025-09-23: mmsnarewinsec: comprehensive Windows Security
Event Log parser * 2025-09-23: doc: improve subtree, list template documentation
* 2025-09-23: doc: further improve template doc * 2025-09-23: Update
doc/source/reference/templates/templates-type-list.rst * 2025-09-23:
Codex/refactor module documentation for mmdblookup * 2025-09-22: omfile: add
addLF option to append newline (#6165) * 2025-09-22: Codex/refactor rsyslog
parameter documentation inmmexternal * 2025-09-22: Codex/document mmaudit plugin
with sphinx (#6167) * 2025-09-20: tests/omelasticsearch: align suite with ES
7.14, reduce flakiness * 2025-09-19: refactor rsyslog parameter documentation
mmdarwin * 2025-09-19: refactor rsyslog parameter documentation mmcount *
2025-09-19: refactor rsyslog module parameter documentation mmaitag *
2025-09-18: omazureeventhubs: fix data races and suppressions * 2025-09-18:
mmleefparse: new message modification module for LEEF format * 2025-09-17: doc:
Add helper scripts to build documentation * 2025-09-17: * imtcp: warn on TLS
handshakes received on plain listeners * 2025-09-16: refactor rsyslog parameter
documentation mmutf8fix * 2025-09-15: fix config error on systems with pkg-
config but not libgcrypt-config * 2025-09-15: docs/getting_started: add AI
assistants page * 2025-09-15: doc: new beginner tutorials * 2025-09-15: dev
container: do not work-around libgcrypt dev interface change * 2025-09-13: doc:
describe regex lookup table type * 2025-09-13: Codex/refactor rsyslog parameter
documentation for mmtaghostname * 2025-09-12: logctl tool: fix mongoc.h include
location * 2025-09-12: docs: fix doc build instructions (Sphinx 4.5+, main,
monorepo) (#6114) * 2025-09-12: docker: fix collector, udp and tcp could not be
enabled individually * 2025-09-12: docker: enhancements to debian sid and ubuntu
24.04 dev container * 2025-09-12: docker: add relp listener to rsyslog
"collector" * 2025-09-12: doc: document compactjsonstring global option (#6127)
* 2025-09-12: doc: better doc for rsyslog collector container * 2025-09-12:
core: add doxygen comments to errmsg object * 2025-09-11: refactor rsyslog
module parameter documentation for mmsnmptrapd * 2025-09-11: net: Add
NetworkNamespace APIs * 2025-09-11: imtcp support for NetworkNamespace *
2026-02-16: prepare for 8.2602.0 scheduled stable release * 2025-09-10: tls:
process TLS 1.3 KeyUpdate during send (ossl/gtls) * 2025-09-10: improve original
patch * 2025-09-10: docker: update Debian 13 build to inlcude more modules *
2025-09-10: doc: improg had a strangely worded limitation listed - corrected
(#6115) * 2025-09-10: Update doc/README.md * 2025-09-09: doc: update reference
section on doc structure * 2025-09-09: core: add setting to permit compact json
format * 2025-09-09: Codex/refactor rsyslog module parameter documentation
mmrfc5424addhmac * 2025-09-09: CI remove old kafka codecov builder now the new
one is present * 2025-09-06: doc: document git path resolution * 2025-09-06:
devtools: Specify usage of clang-format-18 to pin v18 * 2025-09-05:
rainerscript: add toupper() function * 2025-09-05: misc: add void parameter
lists * 2025-09-05: doc: restore missing doc files in configure.ac * 2025-09-04:
imhttp: guard handler registration * 2025-09-04: devtools: use codecov uploader
in CI script * 2025-09-04: config script: add b64_decode function * 2025-09-04:
Update devtools/run-ci.sh * 2025-09-04: Codex/refactor rsyslog parameter
documentation ejsnoq (#6085) * 2025-09-03: runtime: fix Darwin build regressions
and improve BSD portability * 2025-09-03: omkafka: allow sending static headers
* 2025-09-03: mmpstrucdata: split parameter docs into reference pages *
2025-09-03: mmpstrucdata: fix action parameter anchors and casing * 2025-09-03:
imdocker: Add image name to metadata fields * 2025-09-03: code style: fix macro
formatting * 2025-09-03: ci(docs): add PR preview workflow via Actions Pages *
2025-09-03: Implement omhttp batching and performance improvements * 2025-09-03:
Codex/refactor rsyslog parameter documentation (#6074) * 2025-09-02: omsnmp:
restructure (#6063) * 2025-09-02: imrelp: fix potential segfault on termination
(#5600) * 2025-09-02: core: add fromhost-port message property * 2025-08-28:
tools/rsyslog.conf.5: fix example Port= value * 2025-08-28: rainerscript: warn
on excessive random range * 2025-08-28: queue: refactor batch deletion with
explicit phases (#6013) * 2025-08-28: omsendertrack: "fix" static analyzer
reported issue * 2025-08-28: doc: work around a spellcheck restriction *
2025-08-28: doc: note AI authorship\n\nAI-Agent: ChatGPT * 2025-08-28: core:
some code cleanup * 2025-08-28: community: disable automatic welcome action *
2025-08-28: code cleanup (rephrasing false postive commented out code) *
2025-08-27: improve PR welcome message handling * 2025-08-27: docs: fix typo
('begin' -> 'beginning') in developer documentation (#6029) * 2025-08-27: docs:
fix minor typos in docs/source (#6028) * 2025-08-27: doc: fix assorted typos
across documentation * 2025-08-27: debug version of welcome script * 2025-08-27:
community: some fixes to "welcome" helper action * 2025-08-27: community: add
welcome message to first few commits (#6032) * 2025-08-27: codeql: fix "master"
branch reference * 2025-08-27: Potential fix for code scanning alert no. 44:
Commented-out code * 2025-08-27: Add actions analysis * 2025-08-26: prepare for
next scheduled stable release cycle * 2025-08-26: docs: add rsyslog issue
assistant build files (#6026) * 2025-08-26: dev doc: mention "good first issue"
dashboard * 2025-08-26: Update README.md * 2025-08-25: prepare for daily stable
8.2508.0 release * 2025-08-25: fix: doc/ not in tarball (in progress) *
2025-08-25: doc: add code of conduct * 2025-08-24: omrelp: add TCP keepalive
configuration * 2025-08-23: immark: document config cleanup * 2025-08-23:
imdocker: free temp buffer after log option parse * 2025-08-22: tcpsrv: revert
PR 5806 because it was ineffective * 2025-08-22: tcpsrv: refactor IO loop;
rearm-before-unlock; poll path * 2025-08-22: imjournal: initialize instance
fields to avoid invalid free * 2025-08-22: imdocker: fix cosmetic memory leak *
2025-08-21: runtime/tcpsrv: drop obsolete inQueue handling * 2025-08-21: omhttp:
guard rest path template access * 2025-08-21: mmaitag: fix potential memory leak
* 2025-08-21: doc: restructure templates docs into hub and refs * 2025-08-21:
doc: restore property statement context * 2025-08-21: core: code cleanup, avoid
dead assignment * 2025-08-21: core/nsd_ptcp: zero addr before getpeername() *
2025-08-20: tcpsrv: stop loop after closeSess to avoid use-after-free *
2025-08-20: omprog: split parameter docs into reference pages * 2025-08-20:
omfwd: document and enforce pool-level suspend semantics * 2025-08-20: Update
README.md - notification channels * 2025-08-20: Update
.github/instructions/modules.plugins.instructions.md * 2025-08-19: imhttp:
optional auth + Content-Length for metrics/health * 2025-08-19: doc: make AI-
First concrete; add guardrails and CI proof * 2025-08-19: atomic: remove
trailing semicolons from helper macros * 2025-08-18: template: fix missing
lenStr in subtree templates * 2025-08-18: tcpflood: omit delimiter for octet
frames * 2025-08-18: serialize TLS session setup to avoid data race *
2025-08-18: runtime: fix NetstreamDriverCAExtraFiles parsing * 2025-08-18:
omsendertrack: stop towards full completion of module. * 2025-08-18: omhttp: add
profile support and revise HTTP retry semantics * 2025-08-18: imuxsock: tidy
parameter docs and links * 2025-08-18: imuxsock: split input parameter docs into
reference pages * 2025-08-18: imptcp: split parameter docs into reference pages
* 2025-08-18: docs: streamline contrib templates and commit guidance *
2025-08-18: docs: split imfile module parameters (#5941) * 2025-08-18:
doc/imfile: add File and Tag to parameter samples * 2025-08-18: OMHIREDIS:
supported UDS redis server address * 2025-08-17: ommongodb: fix compilation of
SSL/TLS support * 2025-08-17: ommongodb: add support for mongo-c-driver v2 *
2025-08-17: docs: rewrite container section with current images * 2025-08-17:
doc: add per-container docker pages with env defaults (#5960) * 2025-08-16:
imjournal: fix double sd_journal_close() during thread cancellation *
2025-08-16: doc: warn against unofficial and outdated doc clones * 2025-08-16:
doc: set html_baseurl to emit canonical tags * 2025-08-16: Update
doc/source/conf.py * 2025-08-15: omhttp: migrate to OMODTX; prep for project-
supported status * 2025-08-15: imtcp: split input parameter docs into reference
pages * 2025-08-15: imtcp: fix parameter scopes and add input examples *
2025-08-15: doc: omkafka SASL-from-env example + backticks doc overhaul *
2025-08-15: Update tests/omprog-feedback.sh * 2025-08-15: Fix transaction
suspension handling for issue #2420 * 2025-08-14: ommysql: remove long-standing
non-needed TODO item * 2025-08-14: imfile: add per-file impstats counters and
tests * 2025-08-14: doc: split imudp parameter docs * 2025-08-13: ommysql: drop
global rwlock_hmysql, revert a3b2983 * 2025-08-13: docs: split pmrfc3164
parameters into structured reference pages * 2025-08-13: docs: split
omelasticsearch parameters into dedicated reference pages * 2025-08-13: docs:
split imjournal parameter docs into dedicated reference pages * 2025-08-13: doc:
increase visibility of reverse DNS cache controls * 2025-08-13: doc: clarify
reverse DNS cache scope * 2025-08-13: doc: add v8 locking note * 2025-08-13:
chore: document AI-generated changes * 2025-08-12: doc: update to doc
(improvement) strategy * 2025-08-12: doc: reference AI module map in AGENTS.md
and DEVELOPING.md * 2025-08-12: doc: refactor imdocker module param docs into
structured ref pages * 2025-08-12: doc: imdocker had invalid legacy config stmt
info - removed * 2025-08-11: omazureeventhubs: add Doxygen docs for proton
thread and flow (NFC) * 2025-08-11: omamqp1: resize buffer via realloc with
error handling * 2025-08-11: docs: add developer page "Action Threads and Queue
Engine" * 2025-08-04: omazurevenethubs: fix compiler warning * 2025-08-01:
omysql: better doc to clarify mutex use * 2025-08-01: core: migrate callback
invocations to type-safe signatures * 2025-08-01: Fix: Remove unsafe function
pointer casting in cfsysline.c * 2025-07-31: doc fix: remove doc for debug
options that no longer exits * 2025-07-31: core: improve inline code doc for
action.[ch] * 2025-07-30: parser: add checkParserInst hook for pre-registration
validation * 2025-07-30: doc: improve "AI First" coverage in about section *
2025-07-28: ossl: Add PrioritizeSAN option to OpenSSL network stream driver *
2025-07-28: imjournal: fix vulnerability in state file creation * 2025-07-28:
gtls: log missing certificate/key only once * 2025-07-27: doc: Improve omfwd
module documentation * 2025-07-27: doc(omfwd): split and restructure omfwd
documentation * 2025-07-25: document [io]mczmq modules * 2025-07-25: doc: add an
initial "about" section * 2025-07-25: Add Doxygen comments for czmq modules
(#5865) * 2025-07-24: Add sphinxcontrib-mermaid to documentation Docker image *
2025-07-22: docs: add structured beginner guide under getting_started/ *
2025-07-22: doc: introduce mermaid diagrams and modernized configuration docs *
2025-07-21: doc: major restructure and content improvements * 2025-07-21: doc:
fix legacy conf where modern should be * 2025-07-21: Add furo theme for sphinx *
2025-07-20: doc: add json targets * 2025-07-20: doc: Modernize documentation and
tooling * 2025-07-20: Add documentation build workflow * 2025-07-20: Add doc
build workflow for PRs * 2025-07-20: Add Apache License to documentation *
2025-07-19: doc: some cleanup and naming changes * 2025-07-19: doc: omit footer
in singlehtml builds by default * 2025-07-18: rainerscript: backticks support
${VAR} and adjacent text * 2025-07-18: pmrfc3164: add headerless message
detection and handling * 2025-07-18: doc: restore control flow notes *
2025-07-18: doc: clarify action flow and add test requirement * 2025-07-18:
Correct connection timing computation * 2025-07-17: fix: readthedocs definitions
* 2025-07-17: doc: provide strategy and implementation document * 2025-07-17:
doc: fix "edit on github" repo link * 2025-07-17: doc: enable readthedocs.io
support * 2025-07-16: style: reformat Config Settings block with Doxygen
comments * 2025-07-16: style: normalize C source formatting via clang-format
(PoC) * 2025-07-16: omelasticsearch fix: Handle HTTP 401/403 auth errors *
2025-07-16: fix mmaitag provider handling and memory safety * 2025-07-16:
cleanup: remove code-style tools that are no longer neeed * 2025-07-16: cleanup:
fix reference to "master" branch -> now "main" * 2025-07-16: chore: add project-
wide formatting and editor configs * 2025-07-16: Fix race condition in imtcp
when closing sessions * 2025-07-16: Add IP address SAN support * 2025-07-15:
fix: Prevent redefinition warnings for syslog macros * 2025-07-15: feat:
introduce mmaitag PoC with Gemini AI provider (#5754) * 2025-07-15: doc: add FAQ
with commonly misunderstood config sequences * 2025-07-15: build: mmaitag in
configure disabled by default (#5797) * 2025-07-15: build: adjust version tag
used for daily stable build process * 2025-07-15: Investigate and resolve
rsyslog issue 2693 (#5793) * 2025-07-14: refactor: modernize macro definitions
to support formatting and clarity * 2025-07-14: docs: Fix minor typos *
2025-07-13: impstats: add support for Prometheus metrics output format *
2025-07-12: docker: reflect new state of repo * 2025-07-12: doc: document gtls
intermediate cert chain * 2025-07-12: doc: clarify purpose of MsgSetRawMsg side
effects * 2025-07-12: dev doc: add design notes to queue subsystem files *
2025-07-12: Improve TLS handshake error logging (#5762) * 2025-07-12: Document
statsobj architecture and formats * 2025-07-11: tooling: new developer tool to
fix trailing spaces * 2025-07-11: Fix unsafe sprintf use in Azure event hubs
module (#5687) * 2025-07-10: update README.md - add new AI "rsyslog Assistant"
link * 2025-07-08: Document native message modification plugin interface (#5757)
* 2025-07-08: AI tools: Add directory for future AI/ML tooling (#5758) *
2025-07-06: scripting: add endswith operator to property filters and
RainerScript * 2025-07-06: nsd_ptcp fix: misleading error messages (regression
from ad1fd21) * 2025-07-06: imtcp: prevent double-enqueue of descriptors via
inQueue flag * 2025-07-06: imkmsg fix: Handle EAGAIN/EWOULDBLOCK check portably
* 2025-07-05: helper utils: clean up python indentation * 2025-07-04: imfile:
add new module/input parameter deleteStateOnFileMove * 2025-06-20: imfile: some
cleanup, no functional changes * 2025-06-20: fix off-by-one buffer overflow *
2025-06-19: tcpsrv cleanup: remove TODO line that was scheduled to be removed *
2025-06-18: tcpsrv: fail to remove already-removed epoll fd is no error *
2025-06-18: official containers: bump rsyslog release nbr for next cycle *
2025-06-17: omsendertrack fix: memory leak in initHashTable * 2025-06-17:
net_ossl: Fix memleak in net_ossl_peerfingerprint * 2025-06-17: doc: first
omsendertrack reference manual entry * 2025-06-17: Bump tj-actions/changed-files
from 4 to 46 in /.github/workflows * 2025-06-17: Add omsendertrack statefile
tests (#5716) * 2025-06-15: update developer doc to point to new rsyslog-doc
location * 2025-06-15: docs: document proof-of-concept status * 2025-06-15: doc:
fix some nits, especially in the faq section * 2025-06-15: doc: add lexer for
rsyslog config language * 2025-06-15: cleanup: fix some TODOs and remove
outdated ones * 2025-06-15: Fix: Correct documentation location and update build
guidance * 2025-06-14: doc: improve description of config parameter block
handling * 2025-06-14: doc: add doxygen comments to runtime header * 2025-06-13:
omfile: update internal doc to doxyfile format and improve it * 2025-06-13:
docs: add commenting style guide and reference * 2025-06-13: add new FAQ on udp
reception troubleshooting * 2025-06-13: Use RGerhards name in omusrmsg header *
2025-06-12: ossl netstream driver: do not import engines if not available
(#5685) * 2025-06-12: Removed the redundant __la_LDFLAGS * 2025-06-11: Add
Makefile for Sphinx documentation * 2025-06-10: prepare scheduled stable version
8.2506.0 * 2025-06-10: omusrmsg: use utmpx on systems where available *
2025-06-10: imtcp: avoid data race in notifyReArm * 2025-06-10: fix hashtable
realloc memset range * 2025-06-09: Revert "queue: emit better warning messages
on queue param mismatch" * 2025-06-08: omfwd regression fix: avoid false active
target change log message * 2025-06-08: lookup: add new table type for regex-
matches * 2025-06-08: imdocker: harden module buffer management * 2025-06-08:
clarify pselect suppression * 2025-06-07: doc: document optional module
dependencies * 2025-06-07: Add optional PCRE match module * 2025-06-06: fix
stringop-overread warning in omusrmsg * 2025-06-06: fix im3195 doc * 2025-06-06:
docs: unify AI commit instructions and improve setup notes * 2025-06-06: docs:
restructure contributor docs for clarity and AI agent readiness * 2025-06-05:
update README to convey new developments in this project * 2025-06-05: fix mime
type typo * 2025-06-05: docs: clarify CI image size * 2025-06-05: Update README
to mirror new project organization * 2025-06-05: STEP: interim new "production"
docker container set * 2025-06-05: Add README files for standard, dockerlogs,
and host * 2025-06-04: stats: add prometheus format to set of supported output
formats * 2025-06-04: imhttp: add simple http health check functionality *
2025-06-04: hostname setting works * 2025-06-04: Fix comment for
parsSkipWhitespace * 2025-05-23: imudp: Output errno after recvmmsg call *
2025-05-15: imjournal: delete redundant lines in imklog.c * 2025-05-12: netstrm:
optimized interface for passing connection err info * 2025-05-08: tls subsystem:
generate better error message on accept failure * 2025-04-24: tcpsrv: ensure
thread name set via pthread is max 15 char * 2025-04-24: ossl tls driver: better
error reporting * 2025-04-18: gnutls netstrm drvr fix: handle write retry
correctly in recv call * 2025-04-17: tcpsrv bugfix: do not busy wait on io
events * 2025-04-16: tcpsrv bugfix: input name was not properly propagated *
2025-04-16: add experimental stats for worker awaking via event notification *
2025-04-15: tcpsrv: fix non-maintained stats counter "run" * 2025-03-25:
Feature: #define macro creation for journald namespace function. * 2025-03-22:
omjournal: Fix priority value. * 2025-03-22: Feature: Add journald namespace
feature to omjournal. * 2025-03-17: imuxsock: Add statistics counter for
discarded messages * 2025-03-14: cosmetic: remove clang static analyzer false
positive * 2025-03-06: omsendertrack: new module * 2025-03-06: Fix a buffer
overflow when the argument to replace is empty * 2025-03-05: rsyslog startup
bugfix: cosmetic memory leak * 2025-03-05: gnutls TLS driver: fix small memory
leak * 2025-03-05: core: fix potential misadressing in sigmask * 2025-03-03:
Update man page dates * 2025-03-01: omhttp: fix handling of httpProxy variable *
2025-02-28: "fix" clang 18 static analyzer false positives * 2025-02-27: queue:
emit better warning messages on queue param mismatch * 2025-02-26: core: fix
potential NULL ptr access on HUP in very early startup phase * 2025-02-21: bump
version number for next scheduled stable cycle * 2025-02-20: Fix typo in debug
printf of ommysql

## Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like
YaST online_update or "zypper patch".  
Alternatively you can run the command listed for your product:

  * SUSE Linux Enterprise Server 16.1  
    zypper in -t patch SUSE-SLES-16.1-16

  * SUSE Linux Enterprise Server for SAP Applications 16.1  
    zypper in -t patch SUSE-SLES-16.1-16

## Package List:

  * SUSE Linux Enterprise Server 16.1 (aarch64 ppc64le s390x x86_64)
    * rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1
    * rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1
    * rsyslog-debugsource-8.2608.0-160100.1.1
    * rsyslog-module-gtls-8.2608.0-160100.1.1
    * rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1
    * rsyslog-module-relp-8.2608.0-160100.1.1
    * rsyslog-module-mmnormalize-8.2608.0-160100.1.1
    * rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1
    * rsyslog-debuginfo-8.2608.0-160100.1.1
    * rsyslog-8.2608.0-160100.1.1
    * rsyslog-module-gssapi-8.2608.0-160100.1.1
    * rsyslog-module-ossl-8.2608.0-160100.1.1
    * rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1
    * rsyslog-devel-8.2608.0-160100.1.1
  * SUSE Linux Enterprise Server 16.1 (noarch)
    * rsyslog-doc-8.2608.0-160100.1.1
  * SUSE Linux Enterprise Server for SAP Applications 16.1 (ppc64le x86_64)
    * rsyslog-module-gtls-debuginfo-8.2608.0-160100.1.1
    * rsyslog-module-mmnormalize-debuginfo-8.2608.0-160100.1.1
    * rsyslog-debugsource-8.2608.0-160100.1.1
    * rsyslog-module-gtls-8.2608.0-160100.1.1
    * rsyslog-module-ossl-debuginfo-8.2608.0-160100.1.1
    * rsyslog-module-relp-8.2608.0-160100.1.1
    * rsyslog-module-mmnormalize-8.2608.0-160100.1.1
    * rsyslog-module-relp-debuginfo-8.2608.0-160100.1.1
    * rsyslog-debuginfo-8.2608.0-160100.1.1
    * rsyslog-8.2608.0-160100.1.1
    * rsyslog-module-gssapi-8.2608.0-160100.1.1
    * rsyslog-module-ossl-8.2608.0-160100.1.1
    * rsyslog-module-gssapi-debuginfo-8.2608.0-160100.1.1
    * rsyslog-devel-8.2608.0-160100.1.1
  * SUSE Linux Enterprise Server for SAP Applications 16.1 (noarch)
    * rsyslog-doc-8.2608.0-160100.1.1

## References:

  * https://www.suse.com/security/cve/CVE-2026-19654.html
  * https://www.suse.com/security/cve/CVE-2026-61548.html
  * https://www.suse.com/security/cve/CVE-2026-78002.html
  * https://www.suse.com/security/cve/CVE-2026-92709.html
  * https://bugzilla.suse.com/show_bug.cgi?id=1257604
  * https://bugzilla.suse.com/show_bug.cgi?id=1271910
  * https://bugzilla.suse.com/show_bug.cgi?id=1272414
  * https://bugzilla.suse.com/show_bug.cgi?id=1274610
  * https://bugzilla.suse.com/show_bug.cgi?id=1275926
  * https://bugzilla.suse.com/show_bug.cgi?id=1281628
  * https://bugzilla.suse.com/show_bug.cgi?id=1285036
  * https://bugzilla.suse.com/show_bug.cgi?id=1286162
  * https://bugzilla.suse.com/show_bug.cgi?id=1286926

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.suse.com/pipermail/sle-security-updates/attachments/20261110/176254b4/attachment.htm>