Recommended update for rsyslog

Announcement ID: SUSE-RU-2024:3135-1
Rating: moderate
References:
Affected Products:
  • Basesystem Module 15-SP6
  • openSUSE Leap 15.6
  • Server Applications Module 15-SP6
  • SUSE Linux Enterprise Desktop 15 SP6
  • SUSE Linux Enterprise Real Time 15 SP6
  • SUSE Linux Enterprise Server 15 SP6
  • SUSE Linux Enterprise Server for SAP Applications 15 SP6

An update that can now be installed.

Description:

This update for rsyslog fixes the following issues:

  • Version upgrade
  • patches replaced by upgrade (details in upgrade logs)
  • Revert "Update omlibdbi.c"
  • imkmsg: add params "readMode" and "expectedBootCompleteSeconds"
  • testbench: fix "typo" in test case
  • omazureeventhubs: Corrected handling of transport closed failures
  • imkmsg: add module param parseKernelTimestamp
  • imfile: remove state file on file delete fix
  • imklog bugfix: keepKernelTimestamp=off config param did not work
  • Netstreamdriver: deallocate certificate related resources
  • TLS subsystem: add remote hostname to error reporting
  • Fix forking issue do to close_range call
  • replace debian sample systemd service file by readme
  • testbench: bump zookeeper version to match current offering
  • Update rsyslog.service sample unit to the latest version used in Debian Trixie
  • Only keep a single rsyslog.service for Debian
  • Remove no longer used --with-systemdsystemunitdir configure switch
  • use logind instead of utmp for wall messages with systemd
  • Typo fixes
  • Drop CAP_IPC_LOCK capability
  • Add CAP_NET_RAW capability due to the omudpspoof module
  • Add new global config option "libcapng.enable"
  • tcp net subsystem: handle data race gracefully
  • Avoid crash on restart in imrelp SIGTTIN handler
  • patches replaced by upgrade
  • fix startup issue on modern systemd systems
  • Fix misspeling in message.
  • tcpflood bugfix: plain tcp send error not properly reported
  • omprog bugfix: Add CAP_DAC_OVERRIDE to the bounding set
  • testbench: cleanup and improve some more imfile tests
  • lookup tables: fix static analyzer issue
  • lookup tables bugfix: reload on HUP did not work when backgrounded
  • CI: fix and cleaup github workflow
  • imjournal: Support input module
  • testbench: make test more reliable
  • tcpflood: add -A option to NOT abort when sending fails
  • tcpflood: fix today's programming error
  • openssl: Replaced depreceated method SSLv23_method with TLS_method
  • testbench improvement: define state file directories for imfile tests
  • testbench: cleanup a test and some nitfixes to it
  • tcpflood bugfix: TCP sending was not implemented properly
  • testbench: make waiting for HUP processing more reliable
  • build system: make rsyslogd execute when --disable-inet is configured
  • CI: update zookeper download to newer version
  • ossl driver: Using newer INIT API for OpenSSL 1.1+ Versions
  • ossl: Fix CRL File Expire from 1 day to 100 years.
  • PR5175: Add TLS CRL Support for GnuTLS driver and OpenSSL 1.0.2+
  • omazureeventhubs: Initial implementation of new output module
  • TLS CRL Support Issue 5081
  • action.resumeintervalmax: the parameter was not respected
  • IMHIREDIS::FIXED:: Restore compatiblity with hiredis < v1.0.0
  • Add the 'batchsize' parameter to imhiredis
  • Clear undefined behavior in libgcry.c (GH #5167)
  • Do not try to drop capabilities when we don't have any
  • testbench: use newer zookeeper version in tests
  • build system: more precise error message on too-old lib
  • Fix quoting for omprog, improg, mmexternal

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.6
    zypper in -t patch SUSE-2024-3135=1 openSUSE-SLE-15.6-2024-3135=1
  • Basesystem Module 15-SP6
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP6-2024-3135=1
  • Server Applications Module 15-SP6
    zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP6-2024-3135=1

Package List:

  • openSUSE Leap 15.6 (aarch64 ppc64le s390x x86_64 i586)
    • rsyslog-module-kafka-8.2406.0-150600.12.3.2
    • rsyslog-module-gssapi-8.2406.0-150600.12.3.2
    • rsyslog-module-gcrypt-8.2406.0-150600.12.3.2
    • rsyslog-module-gtls-8.2406.0-150600.12.3.2
    • rsyslog-module-mmnormalize-8.2406.0-150600.12.3.2
    • rsyslog-module-pgsql-8.2406.0-150600.12.3.2
    • rsyslog-module-kafka-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-omamqp1-8.2406.0-150600.12.3.2
    • rsyslog-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-dbi-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-omamqp1-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-omhttpfs-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-snmp-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-relp-8.2406.0-150600.12.3.2
    • rsyslog-module-relp-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-snmp-8.2406.0-150600.12.3.2
    • rsyslog-module-omtcl-8.2406.0-150600.12.3.2
    • rsyslog-module-gtls-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-diag-tools-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-mmnormalize-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-mysql-8.2406.0-150600.12.3.2
    • rsyslog-module-elasticsearch-8.2406.0-150600.12.3.2
    • rsyslog-module-mysql-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-ossl-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-gcrypt-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-pgsql-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-udpspoof-8.2406.0-150600.12.3.2
    • rsyslog-module-udpspoof-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-omtcl-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-omhttpfs-8.2406.0-150600.12.3.2
    • rsyslog-module-elasticsearch-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-ossl-8.2406.0-150600.12.3.2
    • rsyslog-debugsource-8.2406.0-150600.12.3.2
    • rsyslog-doc-8.2406.0-150600.12.3.2
    • rsyslog-module-gssapi-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-dbi-8.2406.0-150600.12.3.2
    • rsyslog-8.2406.0-150600.12.3.2
    • rsyslog-diag-tools-8.2406.0-150600.12.3.2
  • Basesystem Module 15-SP6 (aarch64 ppc64le s390x x86_64)
    • rsyslog-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-8.2406.0-150600.12.3.2
    • rsyslog-debugsource-8.2406.0-150600.12.3.2
  • Server Applications Module 15-SP6 (aarch64 ppc64le s390x x86_64)
    • rsyslog-module-mmnormalize-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-mysql-8.2406.0-150600.12.3.2
    • rsyslog-module-snmp-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-debugsource-8.2406.0-150600.12.3.2
    • rsyslog-module-mysql-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-gssapi-8.2406.0-150600.12.3.2
    • rsyslog-module-pgsql-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-udpspoof-8.2406.0-150600.12.3.2
    • rsyslog-module-gtls-8.2406.0-150600.12.3.2
    • rsyslog-module-mmnormalize-8.2406.0-150600.12.3.2
    • rsyslog-module-udpspoof-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-gtls-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-relp-8.2406.0-150600.12.3.2
    • rsyslog-module-pgsql-8.2406.0-150600.12.3.2
    • rsyslog-module-relp-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-snmp-8.2406.0-150600.12.3.2
    • rsyslog-debuginfo-8.2406.0-150600.12.3.2
    • rsyslog-module-gssapi-debuginfo-8.2406.0-150600.12.3.2