{"id":"openSUSE-SU-2026:22184-1","summary":"Security update for rsyslog","details":"This update for rsyslog fixes the following issues:\n\n- CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910).\n- CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414).\n- CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926).\n- CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without\n  explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926).\n- RainerScript replace() length wrap (bsc#1285036).\n\nChanges for rsyslog:\n\n- added new rsyslog (imdtls/omdtls) DTLS modules (jsc#PED-16623)\n- upgrade to rsyslog 8.2608.0 (bsc#1257604)\n * 2026-08-18: imbeats: rearm listener after failed TLS accept\n * 2026-08-18: msg: serialize turbo snapshot duplication\n * 2026-08-18: omfile: harden dynafile default containment\n * 2026-08-18: fixup! omfwd: support PKCS#11 URIs with ossl TLS\n * 2026-07-02: omfwd: support PKCS#11 URIs with ossl TLS\n * 2026-07-21: mmkubernetes: reload SA token proactively and on HTTP 401\n * 2026-08-17: devtools: remove Cubic from local validation\n * 2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount\n * 2026-08-11: tcpsrv: synchronize session table slots\n * 2026-08-11: imrelp: preserve errno across stop signal\n * 2026-08-12: examples.rst: Missing space in template\n * 2026-08-10: mmnormalize: merge debug metadata\n * 2026-08-08: normalizers: complete debug test gating\n * 2026-08-08: normalizers: complete debug integration\n * 2026-08-07: mmnormalize, pmnormalize: add liblognorm debugging\n * 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead of crashing\n * 2026-08-07: runtime: make error-message flag atomic\n * 2026-07-24: fuzz: exercise RFC 3164 and RFC 5424 parsers\n * 2026-08-05: build: unify indentation in AC_CONFIG_FILES list\n * 2026-07-25: imfile: fix delay.message microsecond conversion\n * 2026-07-24: diskqueue: reject symlinked persisted segments\n * 2026-06-23: omfile: control symlink following\n * 2026-07-25: mmnormalize: make HUP reload worker-safe\n * 2026-07-24: docs(agents): add Cursor Cloud environment setup notes\n * 2026-07-22: imbeats: harden Lumberjack input resource handling\n * 2026-07-23: stringbuf: harden empty string replacement\n * 2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654 bsc#1271910)\n * 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the done: label\n * 2026-07-21: queue: preserve DA child work during shutdown\n * 2026-07-21: imtcp: release completed zlib decoder state\n * 2026-07-09: doc: clarify JSON array rendering\n * 2026-07-21: Potential fixes for 5 code quality findings (#7397)\n * 2026-07-20: ratelimit: optimize port-based per-source keys\n * 2026-07-20: imtcp: make zstd window budget configurable\n * 2026-07-19: imtcp: use snake case for zstd window tracking\n * 2026-07-17: imtcp: bound aggregate zstd decoder window memory\n * 2026-07-20: statsobj: guard Prometheus escape writes\n * 2026-07-18: config: do not instantiate actions disabled via config.enabled=\"off\"\n * 2026-07-15: queue: document DA engine internals\n * 2026-07-14: msg: enforce source-property helper contract\n * 2026-07-10: ratelimit: remove per-source key policy hot lock\n * 2026-07-08: ratelimit: speed source-key shortcuts\n * 2026-07-15: queue: clarify DA transfer worker role\n * 2026-07-18: compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback\n * 2026-07-18: rainerscript: warn on constant AND/OR operand at parse time\n * 2026-07-18: configure: include \u003cstddef.h\u003e in the STAILQ detection test\n * 2026-07-17: mmnormalize: share Turbo CEE root path check\n * 2026-07-17: mmnormalize: fall back after Turbo materialization failure\n * 2026-07-17: mmnormalize: preserve turbo results across message boundaries\n * 2026-07-17: benchmarks: harden comparison and helper inputs\n * 2026-07-16: segdisk: optimize CRC accounting and add benchmarks\n * 2026-07-15: imjournal: stop invalidation reopen busy-loop\n * 2026-07-14: queue: harden segmented DA lifecycle invariants\n * 2026-07-14: queue: harden DA portability and startup cleanup\n * 2026-07-14: queue: address segmented DA review findings\n * 2026-07-14: queue: stabilize DA shutdown and reload state\n * 2026-07-14: queue: clarify lazy marker and legacy state paths\n * 2026-07-14: queue: gate idle cleanup on durable intent\n * 2026-07-14: queue: document empty DA marker replacement\n * 2026-07-14: queue: preserve classic state on transient load errors\n * 2026-07-14: queue: make idle cleanup restoration crash safe\n * 2026-07-14: queue: fail classic DA startup on real errors\n * 2026-07-14: queue: clarify dirty DA configuration handling\n * 2026-07-14: queue: separate DA idle and worker timeouts\n * 2026-07-14: queue: document DA auto-upgrade boundary\n * 2026-07-14: queue: publish fresh DA markers on first spill\n * 2026-07-14: queue: constrain classic DA startup fallback\n * 2026-07-14: queue: clarify disabled DA idle timeout\n * 2026-07-14: queue: preserve classic DA startup fallback\n * 2026-07-14: doc: describe segmented disk-assisted queues\n * 2026-07-14: queue: add segmented disk-assisted engine\n * 2026-07-14: queue: retain adopted recovery frontier\n * 2026-07-14: queue: address segmented disk review findings\n * 2026-07-13: queue: wake workers before capacity waits\n * 2026-07-13: queue: make segmented deletion resumable\n * 2026-07-13: queue: initialize missing state in empty spool dirs\n * 2026-07-13: queue: reject invalid segmented codec field types\n * 2026-07-13: queue: avoid sanitized generation wrap\n * 2026-07-13: queue: expose segmented disk durability test hooks\n * 2026-07-13: queue: make segmented disk recovery lazy\n * 2026-07-09: queue: rework experimental segmented disk backend\n * 2026-07-08: imjournal: warn when failing to get the MESSAGE field\n * 2026-07-08: omawslogshlc: add CloudWatch Logs HLC output module\n * 2026-07-08: core: add systemd READY delay opt-in\n * 2026-06-02: core/imfile: synchronize sd_notify READY=1 with module startup\n * 2026-07-07: ratelimit: shard per-source state\n * 2026-07-06: docs: validate marked config samples\n * 2026-07-07: ratelimit: shard named config registry\n * 2026-07-06: runtime: harden ratelimit per-source reload\n * 2026-07-06: queue: align legacy action batch default\n * 2026-07-06: runtime: relax worker-count log reads\n * 2026-07-06: core: relax selected atomic flag reads\n * 2026-07-06: omkafka: relax poll stop flag atomics\n * 2026-07-06: doc: add documentation for imfile delay.message parameter\n * 2026-06-04: core: add generic output rate limiting\n * 2026-07-05: omelasticsearch: apply TLS options during detection\n * 2026-06-24: omprog: pace transaction retry resumes\n * 2026-07-02: runtime: add relaxed 32-bit atomic helpers\n * 2026-07-02: runtime: fix uint64 atomic fallback return\n * 2026-07-02: net: match legacy allowed sender hostname handling\n * 2026-07-02: runtime: modernize atomic helper usage\n * 2026-07-02: net: add modern allowedSender ACLs\n * 2026-07-02: queue: keep DA child workers alive while idle\n * 2026-07-01: runtime: add atomic read load helpers\n * 2026-07-01: rainerscript: align hex escape lexer states\n * 2026-06-30: rainerscript: accept hex object string escapes\n * 2026-06-30: runtime: synchronize action retry shutdown state\n * 2026-06-30: mmutf8fix: fix replacement sequence examples\n * 2026-06-16: parser: preserve first sanitize offset with SpaceLF\n * 2026-06-29: template: avoid new legacy octal escape\n * 2026-06-29: Make imptcp-epoll-add-failure.sh Linux-only\n * 2026-06-29: Use check_LTLIBRARIES to generate liboverride_* test libraries\n * 2026-06-29: doc: correct tcp_user_timeout version marker\n * 2026-06-23: omhttp: continue after permanent data failures\n * 2026-06-28: ommail: harden subject template header output\n * 2026-06-28: omprog/omstdout: guard empty template LF checks\n * 2026-06-23: tcp: skip legacy z after stream decode\n * 2026-06-26: omelasticsearch: escape bulk metadata values\n * 2026-06-24: imtcp: bound zstd decoder window\n * 2026-06-24: mmkubernetes: add kubernetesurl failover\n * 2026-06-26: docs: add v8-stable patch-flow skill to stable branch\n * 2026-06-26: impcap: bound-check ARP address lengths\n * 2026-06-26: Initialize devcontainer option state\n * 2026-06-26: Remove obsolete Ubuntu 18.04 dev containers\n * 2026-06-26: Refresh dev container cleanup\n * 2026-06-26: agent: add v8-stable patch flow skill\n * 2026-06-26: ChangeLog: split include-glob follow-up\n * 2026-06-26: config: keep empty include globs silent\n * 2026-06-26: gtls: harden DNS SAN byte handling\n * 2026-06-25: Codify timeoutGuard testbench invariant\n * 2026-06-26: imhttp: enforce gzip request body limit\n * 2026-06-24: imhttp: defensive fixes and auth fallback correction\n * 2026-06-25: doc/release: prevent invalid release version manual change\n * 2026-06-24: omelasticsearch: add tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups\n * 2026-06-24: input: warn for rulesets without queues\n * 2026-06-24: ommongodb: preserve ISODate fractional seconds\n * 2026-06-24: imuxsock: clarify missing Socket diagnostics\n * 2026-06-24: rsyslogd: reject -o output over input config\n * 2026-06-24: template: add timereceived property alias\n * 2026-06-24: imudp: store received sockaddr length\n * 2026-06-23: imfile: warn on duplicate file monitors\n * 2026-06-24: omudpspoof: stop retrying failed fragments\n * 2026-06-23: gtls: guard early debug-level lookup (bsc#1274610)\n * 2026-06-23: statsobj: handle lock control failures\n * 2026-06-23: build: avoid empty usertools install dirs\n * 2026-06-23: imdocker: recover from stale since anchors\n * 2026-06-23: tcpflood: add GnuTLS priority string option\n * 2026-06-23: imjournal: add journal namespace support\n * 2026-06-23: prepare for next scheduled stable release cycle\n * 2026-06-23: doc: clarify omprog transaction mode status\n * 2026-06-23: errmsg: enrich oversize errorfile records\n * 2026-06-23: omelasticsearch: retry read-only bulk failures\n * 2026-06-23: doc: clarify fromhost case handling\n * 2026-06-23: doc: clarify ommysql data failures\n * 2026-06-23: omuxsock: isolate action socket locks\n * 2026-06-16: template: add octal control character escape\n * 2026-06-16: omfwd: add TCP user timeout action option\n * 2026-06-15: mmutf8fix: support replacement sequences\n * 2026-06-09: [Modernization] Replace Internal Backticks with Shell Expansion: Rscript Batch 1\n * 2026-06-08: diag.sh: fix content-pattern-check and assert-first-column-sum-greater-than\n * 2026-06-23: imtcp: add stream compression support\n * 2026-06-23: docs: add queue-full troubleshooting\n * 2026-06-22: mmpstrucdata: document structured-data buffer invariant\n * 2026-06-21: doc: refine object terminator wording\n * 2026-06-21: doc: clarify security release handling\n * 2026-06-21: doc: clarify RainerScript semicolon use\n * 2026-06-20: rainerscript: escape embedded NULs at C-string boundary\n * 2026-06-20: doc: explain service sandboxing for helpers\n * 2026-06-20: doc: address service sandboxing review\n * 2026-06-20: Apply suggested fix to tools/pmrfc3164.c from Copilot Autofix\n * 2026-06-19: rainerscript: fold constant comparisons\n * 2026-06-18: doc: clarify partial config validation\n * 2026-06-18: config: warn on constant boolean operands\n * 2026-06-17: parser: honor parseHostnameAndTag in RFC3164 parser\n * 2026-06-17: core: fix negated exact priority filters\n * 2026-06-16: rainerscript: keep random result non-negative\n * 2026-06-16: rainerscript: add cbool function\n * 2026-06-16: pmrfc3164: honor parseHostnameAndTag at runtime\n * 2026-06-16: msg: invalidate programname when tag changes\n * 2026-06-16: imfile: deliver same-file monitors independently\n * 2026-06-16: glbl: keep debug logfile notice informational\n * 2026-06-16: doc: modernize GELF forwarding tutorial\n * 2026-06-15: ommail: add SMTP mode test\n * 2026-06-15: mmjsonparse: modernize test output paths\n * 2026-06-14: parser: add optional trailing CR stripping\n * 2026-06-14: ompgsql: accept long server hostnames\n * 2026-06-14: dynstats: warn on duplicate bucket names\n * 2026-06-14: action: warn on duplicate action names\n * 2026-06-13: omfwd: use matching atomic mutex helper\n * 2026-06-08: Merge pull request #7014 from rsyslog/cursor/critical-correctness-bugs-480c\n * 2026-06-05: omazureeventhubs docs: fix underscored parameters\n * 2026-06-04: runtime: fix YAML promotion OOM ownership\n * 2026-06-04: omuxsock docs: correct template parameter\n * 2026-06-04: omhttp: own Splunk profile template names\n * 2026-06-04: mmjsonparse: reject boundary trailing data\n * 2026-06-04: mmdblookup: preserve uint64 values\n * 2026-06-04: mmdblookup: check uint64 fallback formatting\n * 2026-06-04: impstats docs: fix dotted log parameters\n * 2026-06-04: impstats docs: clarify parameter name guidance\n * 2026-06-04: imkafka: stop workers on startup failure\n * 2026-06-04: imkafka: refine startup stop flag handling\n * 2026-06-04: doc: match Sphinx duplicate CLI override handling\n * 2026-06-04: doc: keep stable git docs out of dev mode\n * 2026-06-04: doc: format stable rst_prolog metadata\n * 2026-06-04: doc: fix database tutorial SQL template option\n * 2026-06-03: regexp: avoid per-thread shutdown double-free\n * 2026-06-03: omkafka: fix NULL topic and add action name to onDestroy flush logs\n * 2026-06-03: mmsnareparse: honor searchWindow in tabbed trailing scan\n * 2026-06-03: mmsnareparse: cap tab trailing search by token\n * 2026-06-03: imfifo: guard absent module config paths\n * 2026-06-03: imfifo: bind instances to module config\n * 2026-06-03: imdiag: fix stats reporting gate\n * 2026-06-03: imdiag: avoid checked cond signal while locked\n * 2026-06-03: docker: gate collector imtcp module\n * 2026-06-03: docker: derive single imtcp enable switch\n * 2026-06-03: docker: default derived imtcp switch in collector\n * 2026-06-02: yamlconf: clean up include recursion guard\n * 2026-06-02: tls: propagate wolfSSL send-side read retry\n * 2026-06-02: tls: keep wolfSSL send retry local\n * 2026-06-02: tls: bound wolfSSL send-side read retries\n * 2026-06-02: sidecar: cap UDP burst buffer by total bytes\n * 2026-06-02: runtime: include limits.h for INT_MAX in yamlconf\n * 2026-06-02: runtime: guard against recursive YAML includes\n * 2026-06-02: runtime/queue: reset sizeOnDisk after safe recovery\n * 2026-06-02: rainerscript: accept optimizer NOP statements\n * 2026-06-02: omkafka: fix HUP deadlock when doAction holds mut_doAction (#7129)\n * 2026-06-02: omhttp: avoid retry-ruleset self-stall\n * 2026-06-02: omhiredis: fix TLS context error log\n * 2026-06-02: mmpstrucdata: support custom SD containers (CVE-2026-61548 bsc#1272414)\n * 2026-06-02: mmjsonparse: fix find-json ownership and scan bounds\n * 2026-06-02: mmjsonparse: clear JSON pointer after ownership transfer\n * 2026-06-02: devtools: fold local review experiment into planner\n * 2026-06-01: translate: cover script serialization (#7152)\n * 2026-06-01: dev_env: include lcov in Ubuntu coverage images\n * 2026-06-01: ChangeLog: update 8.2606 entries\n * 2026-06-01: Add parse_time_localtz with documentation\n * 2026-05-31: runtime: join final worker after shutdown wait\n * 2026-05-31: runtime: harden raw message replacement growth\n * 2026-05-31: runtime: fix $!all-json serialization locking\n * 2026-05-31: ratelimit: centralize per-source enforcement\n * 2026-05-31: parser: fix NetAddr cleanup on mask parse errors\n * 2026-05-31: omclickhouse: report HTTP response errors\n * 2026-05-31: omclickhouse: document SQL template option\n * 2026-05-31: omclickhouse: clean up JSON root on OOM\n * 2026-05-31: action: avoid committing suspended retry batches\n * 2026-05-31: Keep transactional action queue messages on shutdown\n * 2026-05-30: rainerscript: add tocef() and cef_ext_escape() for CEF output\n * 2026-05-30: doc: clarify queue crash durability limits\n * 2026-05-30: devtools: add read-only C format check\n * 2026-05-29: tls: propagate send-side receive retry\n * 2026-05-29: tls: preserve send-side receive retry state\n * 2026-05-29: tls: preserve send retry without reconnect\n * 2026-05-29: tls: keep wolfSSL send-side retry local\n * 2026-05-29: tls: keep send-side read retries local\n * 2026-05-29: template: apply style-check formatting\n * 2026-05-29: style: format msg replacement tests\n * 2026-05-29: runtime: fix msg replace helper CI failures\n * 2026-05-29: omkafka: fix suspension not triggered on host resolution failure\n * 2026-05-29: omfwd: schedule retry for deferred TCP flush\n * 2026-05-29: omfwd: preserve connection on retryable TLS sends\n * 2026-05-29: omfwd: avoid tcpclt leak on rebind\n * 2026-05-29: mmsnareparse: preserve regex end-anchor semantics\n * 2026-05-29: imudp: validate listen port formatting\n * 2026-05-29: imudp: harden listen port file writes\n * 2026-05-29: imptcp: simplify compression auto probe\n * 2026-05-29: imkafka: support multiple topics in one input() instance\n * 2026-05-29: imjournal: warn when newest entry is in the future\n * 2026-05-29: imjournal: handle clock jumps in future probe\n * 2026-05-29: docs: strengthen GHSA prompt guardrails\n * 2026-05-29: add func doFunct_ParseTimeLocalTz\n * 2026-05-29: Update doc/security/ghsa-coordination-review-template.md\n * 2026-05-29: Fix rawmsg suffix shift on realloc\n * 2026-05-29: Fix msg replacement and JSON set handling\n * 2026-05-29: Apply suggested fix to tests/mmexternal-response-too-long.sh from Copilot Autofix\n * 2026-05-28: tls: keep send retry state internal\n * 2026-05-28: template: reject invalid regex match selectors\n * 2026-05-28: template: guard NULL property rendering\n * 2026-05-28: packaging: use ETL Vespa env defaults directly\n * 2026-05-28: packaging: default ETL TLS envs in entrypoint\n * 2026-05-28: omelasticsearch: apply clang-format to version probe error\n * 2026-05-28: mmjsontransform: fix dotted conflict ownership\n * 2026-05-28: mmexternal: fix single-instance reply handling\n * 2026-05-28: mmexternal: fix EINTR reply handling\n * 2026-05-28: mmdblookup: clean up failed worker creation\n * 2026-05-28: imuxsock: handle embedded NUL datagrams safely\n * 2026-05-28: imptcp: harden auto compression probe\n * 2026-05-27: tls: preserve recv data during send-side reads\n * 2026-05-27: tls: avoid recv-helper misuse in send WANT_READ\n * 2026-05-27: tls: avoid receive retry state during send\n * 2026-05-27: template: fix jsonftree flat fallback framing\n * 2026-05-27: runtime: reject embedded NULs in mbedtls cert names\n * 2026-05-27: runtime: initialize ratelimit mutex once\n * 2026-05-27: runtime: guard per-thread regexp iterator allocation\n * 2026-05-27: runtime: fix fromhost-port extraction before rcvFrom union swap\n * 2026-05-27: runtime: clean up DNS props on port allocation failure\n * 2026-05-27: runtime-format-regexp-lifecycle-guards\n * 2026-05-27: regexp-clean-up-per-thread-entries\n * 2026-05-27: packaging: expose Vespa HTTPS toggles\n * 2026-05-27: packaging: enable HTTPS by default for ETL Vespa output\n * 2026-05-27: omusrmsg: enable thread-safe action ratelimiter\n * 2026-05-27: omotel: use getProgramName() when deriving app name\n * 2026-05-27: omotel: avoid const cast for app name extraction\n * 2026-05-27: ommysql: handle closed connection before commit\n * 2026-05-27: omkafka: harden failed delivery replay paths\n * 2026-05-27: omhttp: refresh health-check headers after gzip rebuild\n * 2026-05-27: omhttp: keep health-check headers uncompressed\n * 2026-05-27: omelasticsearch: bound startup version probe response size\n * 2026-05-27: mmsnareparse: skip full digit runs in event probe\n * 2026-05-27: mmsnareparse: preserve anchored trailing regex matches\n * 2026-05-27: mmsnareparse: cap regex input in trailing token\n * 2026-05-27: mmsnareparse: avoid quadratic provider scans in snare probe\n * 2026-05-27: mmjsontransform: fix child ownership on dotted merge conflicts\n * 2026-05-27: mmjsontransform: clean up dotted insert ownership\n * 2026-05-27: mmanon: remove assert on malformed embedded IPv4\n * 2026-05-27: mmanon: make random suffix generation fully reachable\n * 2026-05-27: mmanon: build random suffix from byte chunks\n * 2026-05-27: mbedtls-refine-nul-name-checks\n * 2026-05-27: mbedtls-apply-cert-name-style\n * 2026-05-27: lookup: report active table reloads as pending\n * 2026-05-27: lmsig-ksi-bound-debug-precision\n * 2026-05-27: imptcp: serialize helper work per session\n * 2026-05-27: imptcp: add stream:auto compression mode\n * 2026-05-27: imfifo: implement named pipe input module (#7029)\n * 2026-05-27: dynstats: coalesce pending persistence writes per bucket\n * 2026-05-27: dynstats-unlock-on-task-alloc-failure\n * 2026-05-27: docker: fix clickhouse configure flag in Debian 13 dev image\n * 2026-05-27: doc: use literal markup for TLS parameters\n * 2026-05-27: doc: fix shutdown.enable.ctlc spelling in rsyslogd man page\n * 2026-05-27: doc: fix mmrfc5424addhmac sd_id parameter name\n * 2026-05-27: doc: clarify mbedtls requires StreamDriverMode=1 for TLS\n * 2026-05-27: configure: detect relpCltSetKeepAlive support\n * 2026-05-26: stats: avoid notifier teardown deadlocks\n * 2026-05-26: runtime: guard optional regexp object lifecycle in tcp server\n * 2026-05-26: runtime: bound KSI debug record logging by length\n * 2026-05-26: runtime: avoid regexp unload double free\n * 2026-05-26: ratelimit: avoid double free on helper error paths\n * 2026-05-26: perctile: reuse counter cleanup helper\n * 2026-05-26: perctile: link buckets after initialization\n * 2026-05-26: ossl: avoid caching OCSP responses past nextUpdate\n * 2026-05-26: omazuredce: bound HTTP response buffering\n * 2026-05-26: omazuredce: avoid gzip buffer underallocation\n * 2026-05-26: omazuredce-review-followup\n * 2026-05-26: imuxsock: enforce ratelimit.name for credentialed senders\n * 2026-05-26: imuxsock-ratelimit-credential-followup\n * 2026-05-26: impstats: fix double-free in remote write batching cleanup\n * 2026-05-26: imkafka: cap split.json.records fan-out\n * 2026-05-26: imdocker: keep stream alive on rate-limit drops\n * 2026-05-26: imdocker: bound multiline segment compaction\n * 2026-05-26: imdocker: apply clang-format output\n * 2026-05-26: configure: avoid leaking -lgcrypt into global LIBS\n * 2026-05-25: shellcheck: fix masked test assignments\n * 2026-05-25: runtime: validate numeric hardening inputs\n * 2026-05-25: runtime/nsd_gtls: validate IP SAN length before conversion\n * 2026-05-25: parser: verify and fix offAfterPRI calculation\n * 2026-05-25: omhiredis: derive TLS server name from server config\n * 2026-05-25: omfwd: require peers for targetSrv TLS name auth\n * 2026-05-25: omfwd: clarify targetSrv TLS auth error\n * 2026-05-25: nsd_gtls: preserve SAN-present state for malformed IP SAN\n * 2026-05-25: imhttp: write bound listener port to file\n * 2026-05-25: imdtls: write bound listener port to file\n * 2026-05-25: fix(imhiredis): default TLS peer name to configured server\n * 2026-05-24: tools: make AIX SRC reply copy bounded\n * 2026-05-24: statsobj: clear lock flag after prometheus unlock\n * 2026-05-24: runtime: clamp emulated RFC5424 tag length\n * 2026-05-24: runtime: avoid post-fork malloc in execProg\n * 2026-05-24: runtime/statsobj: lock stats list during iteration\n * 2026-05-24: nsd_mbedtls: reject RemoteSNI and wire interface\n * 2026-05-24: nsd_mbedtls: fill remote port interface methods\n * 2026-05-24: mmjsontransform: track per-insert conflicts\n * 2026-05-24: mmjsontransform: avoid leak on policy insert conflict\n * 2026-05-24: mmjsonparse: avoid json double-free on add failure\n * 2026-05-24: mmexternal: avoid undrained stdout/stderr pipe in output=none mode\n * 2026-05-24: mmexternal: address output pipe review findings\n * 2026-05-24: impstats: harden overwrite temp file creation\n * 2026-05-24: imjournal: treat rate-limit discards as non-fatal in readjournal\n * 2026-05-24: gssapi: use uint32_t for token wire length\n * 2026-05-24: gssapi: fix token length framing endianness in sender\n * 2026-05-24: fix(tools): guard AIX SRC reply text against NULL\n * 2026-05-23: rainerscript: fix array and numeric comparisons on JSON vars\n * 2026-05-23: privdrop: update privilege drop comments\n * 2026-05-23: privdrop: log capability context on drop failure\n * 2026-05-23: omelasticsearch: guard dynamic template strings\n * 2026-05-23: omelasticsearch: cache action template count\n * 2026-05-23: imjournal: restore cursor after recovery reopen\n * 2026-05-23: imjournal: recover from stale saved cursor\n * 2026-05-23: imjournal: harden journal invalidation recovery\n * 2026-05-23: imjournal: avoid rotation accounting during recovery\n * 2026-05-23: docs: clarify local validation gates\n * 2026-05-23: contrib, runtime: defensive stability and robustness hardening\n * 2026-05-23: codex: wire local container testing hook into agent workflow\n * 2026-05-22: shell: clean up ShellCheck findings\n * 2026-05-22: python: clean up style and add optional checks\n * 2026-05-22: net_ossl: document SAN-priority hard-stop on old API\n * 2026-05-22: msg: guard MSG replacement offsets (bsc#1272414)\n * 2026-05-22: mmexternal: support one-way helpers and response timeouts\n * 2026-05-22: imptcp: unlink failed accepted sessions\n * 2026-05-22: imjournal: fix double-free hazards on JSON objects\n * 2026-05-22: imfile: add line-number metadata and soften empty checks\n * 2026-05-22: imdocker: terminate compacted multiline buffers\n * 2026-05-22: imbeats: harden pointer transfer in submitEvent\n * 2026-05-22: contrib, plugins: refine pointer hand-off in imhiredis, mmjsonparse, mmsequence\n * 2026-05-22: contrib, plugins: defensive pointer hand-off hardening\n * 2026-05-22: config: warn for unmatched include globs\n * 2026-05-22: agents: document optional local linters\n * 2026-05-21: template: harden property rendering bounds\n * 2026-05-21: tcpsrv: guard listener destructors against NULL references\n * 2026-05-21: tcps_sess: secure regex memory reallocation and destructor\n * 2026-05-21: style: format wolfSSL CRL helper\n * 2026-05-21: ruleset: guard synchronous recursive calls\n * 2026-05-21: rainerscript: harden string and JSON bounds\n * 2026-05-21: pm/fm: defensively harden parsing edge cases\n * 2026-05-21: ossl: enable wolfSSL CRL checks for DER files\n * 2026-05-21: net_ossl: avoid CN fallback when SAN priority unsupported\n * 2026-05-21: mmgrok: keep configured source immutable\n * 2026-05-21: lookup: harden shutdown lifecycle\n * 2026-05-21: imudp: harden thread lifecycles and fix stats memory leak\n * 2026-05-21: imtcp: harden listener setup and legacy config cleanup\n * 2026-05-21: imjournal: defensive memory safety and stability hardening\n * 2026-05-21: docs: codify GHSA coordination workflow\n * 2026-05-21: docs: clarify GHSA triage scope\n * 2026-05-21: docs: add distro component package map\n * 2026-05-21: docs: add GHSA coordination template\n * 2026-05-21: contrib: harden buffer and parser bounds handling\n * 2026-05-21: agent: document local CI preflight tiers\n * 2026-05-21: Update tests/imptcp_uds_unlink.sh\n * 2026-05-21: Apply suggested fix to tests/imptcp_uds_unlink.sh from Copilot Autofix\n * 2026-05-20: ossl: bound OCSP network reads\n * 2026-05-20: mmanon: defensively harden IP suffix parsing\n * 2026-05-20: lookup: reject duplicate table names\n * 2026-05-20: imptcp: harden concurrency, boundaries, and memory safety\n * 2026-05-20: gtls: log peer IP for missing client cert\n * 2026-05-20: config: add global maxOpenFiles setting\n * 2026-05-20: build: fix ARMv7 warnings under Werror\n * 2026-05-20: agents: add ChangeLog maintenance skill\n * 2026-05-20: Update tests/imptcp-discard-truncated-msg-same-session.sh\n * 2026-05-20: ChangeLog: update 8.2606 entries\n * 2026-05-20: Apply suggested fix to tests/imptcp-discard-truncated-msg-same-session.sh from Copilot Autofix\n * 2026-05-20: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix\n * 2026-05-19: imptcp: discard oversize byte after truncation\n * 2026-05-18: tcp: log pre-truncated oversize frames\n * 2026-05-18: runtime: avoid libgcry IV shift UB\n * 2026-05-18: grammar: read pseudo-files in backtick cat\n * 2026-05-18: docker: add container regex noise filter\n * 2026-05-18: doc: remove unavailable StdJSONFmt reference\n * 2026-05-18: agents: require available container validation\n * 2026-05-18: agents: clarify PR babysitting decisions\n * 2026-05-18: ChangeLog: remove duplicate release blocks\n * 2026-05-18: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix\n * 2026-05-17: omelasticsearch: document error-file modes\n * 2026-05-17: doc: list RFC5424 reserved template\n * 2026-05-17: doc: clarify omfile timed flush behavior\n * 2026-05-17: doc: clarify omfile legacy action separation\n * 2026-05-17: containers: update libyaml dev image dependencies\n * 2026-05-17: containers: remove stale dev images\n * 2026-05-17: containers: enable libyaml in Fedora dev images\n * 2026-05-17: containers: enable libyaml in CentOS and Debian CI\n * 2026-05-17: build: honor cross pkg-config for libgcrypt\n * 2026-05-16: devcontainer: remove anonymous helper volumes\n * 2026-05-16: configure: make libyaml default-on explicit\n * 2026-05-16: agents: clarify test intent comment rule\n * 2026-05-15: ommail: add sendmail delivery mode\n * 2026-05-15: omelasticsearch: warn on searchType use\n * 2026-05-15: imdiag: add module-only modern config\n * 2026-05-15: agents: clarify PR babysitting stop condition\n * 2026-05-15: agents: add issue triage skill\n * 2026-05-15: Potential fixes for 2 code quality findings (#6909)\n * 2026-05-14: skills: clarify container validation escalation\n * 2026-05-14: omfile: reject failed dynafile pre-opens\n * 2026-05-14: net_ossl: fix clang-format style in CRL warning\n * 2026-05-14: java: use nio writer in simple plugin skeleton\n * 2026-05-14: imuxsock: reject contradictory socket ownership\n * 2026-05-14: imfile: recover more inotify file updates\n * 2026-05-14: Update .agent/skills/rsyslog_test/SKILL.md\n * 2026-05-13: runtime: add STAILQ fallback for AIX\n * 2026-05-13: net_ossl: fix CRL stack leak when cert store is NULL\n * 2026-05-13: narrow CODEOWNERS ownership\n * 2026-05-13: imdiag: add injectmsg delay option\n * 2026-05-13: devcontainer: quote git common dir mount\n * 2026-05-13: agents: document local overlay lookup\n * 2026-05-13: queue: add per-queue size.enqueued counter (cumulative bytes)\n * 2026-05-12: omrelp: allow TLS auth failure suspension\n * 2026-05-12: imbeats: multiplex sessions for high client counts\n * 2026-05-12: imbeats: harden batch parsing limits\n * 2026-05-12: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix\n * 2026-05-12: Apply suggested fix to tests/imptcp-NUL.sh from Copilot Autofix\n * 2026-05-11: runtime: harden atomic helper fallbacks\n * 2026-05-11: packaging/rpm: add rsyslog-imbeats subpackage\n * 2026-05-11: java: harden skeleton file handling\n * 2026-05-11: imbeats: verify raw and amended ES pipeline\n * 2026-05-11: imbeats: track cumulative Lumberjack sequences\n * 2026-05-11: imbeats: tolerate interrupted poll calls\n * 2026-05-11: imbeats: test Filebeat to Elasticsearch pipeline\n * 2026-05-11: imbeats: harden compressed frame parsing\n * 2026-05-11: imbeats: add Elastic Beats input module\n * 2026-05-11: imbeats: add Elastic Agent Windows fixture test\n * 2026-05-11: Apply suggested fix to tools/ompipe.c from Copilot Autofix\n * 2026-05-11: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix\n * 2026-05-11: Apply suggested fix to runtime/atomic.h from Copilot Autofix\n * 2026-05-11: Apply suggested fix to doc/ai/security_triage_rubric.md from Copilot Autofix\n * 2026-05-10: imuxsock: harden trusted property annotation buffer\n * 2026-05-10: immark: harden runtime config lifetime\n * 2026-05-10: doc: add security triage rubric for AI agents\n * 2026-05-10: [HARDENING] imjournal: harden disk usage stats update\n * 2026-05-10: [HARDENING] imdiag: clarify controlled diagnostics usage\n * 2026-05-09: hardning: harden config parameter ownership and OOM cleanup\n * 2026-05-09: config: add compatibility controls and secure defaults\n * 2026-05-08: rosi-collector: prevent Loki 400 queue stalls\n * 2026-05-08: omdtls: check config string allocations\n * 2026-05-08: mmrfc5424addhmac: harden SD-ID handling\n * 2026-05-08: mmleefparse: check config string allocations\n * 2026-05-08: imbeats: join session threads during teardown\n * 2026-05-08: Fix chkseq EOF handling\n * 2026-05-07: python: make file cleanup lexical\n * 2026-05-07: python: fix external plugin comment typos\n * 2026-05-07: python: close script file handles\n * 2026-05-07: imudp: add dynamic listen port files\n * 2026-05-07: impstats: remove obsolete svg jquery asset\n * 2026-05-07: doc: harden docs config AI fixes\n * 2026-05-07: devcontainer: allow sudo for mapped users\n * 2026-05-07: Update doc/source/conf_helpers.py\n * 2026-05-07: Fix operator precedence in conditions\n * 2026-05-07: Apply suggested fix to tests/omfwd-lb-1target-retry-test_skeleton-TargetFail.sh from Copilot Autofix\n * 2026-05-07: Apply suggested fix to tests/chkseq.c from Copilot Autofix\n * 2026-05-07: Apply suggested fix to doc/source/conf_helpers.py from Copilot Autofix\n * 2026-05-06: scripts: restore repo policy helpers\n * 2026-05-06: scripts: align module policy evaluator name\n * 2026-05-06: net_ossl: support CRL/OCSP revocation on wolfSSL\n * 2026-05-06: java: simplify simple plugin file creation\n * 2026-05-06: impstats: clean up svg jquery findings\n * 2026-05-06: impstats: avoid analyzer wildcard import\n * 2026-05-06: doc: import optional extensions during probe\n * 2026-05-06: doc: broaden optional extension probe errors\n * 2026-05-06: doc: avoid unused python imports\n * 2026-05-06: Apply suggested fix to packaging/docker/rsyslog/standard/Dockerfile from Copilot Autofix\n * 2026-05-05: ratelimit: preserve severity sentinel on s390x\n * 2026-05-05: imtcp: wait for mbedtls diagnostics in tests\n * 2026-05-05: imtcp test: capture mbedtls diagnostics directly\n * 2026-05-05: Add Ubuntu WSL development setup\n * 2026-05-04: improg: stop on child stdout EOF\n * 2026-05-04: github action: remove issue labler\n * 2026-05-04: codeql: silence unused global findings\n * 2026-05-04: codeql: add explicit Python fallbacks\n * 2026-05-04: Apply suggested fix to runtime/datetime.c from Copilot Autofix\n * 2026-04-30: ossl: match PermittedPeer wildcards against cert identities\n * 2026-04-30: Fix omrelp TLS auth failure CPU spin\n * 2026-04-29: packaging/rpm: Add omotel OpenTelemetry Sub-package\n * 2026-04-28: packaging: add multi-arch container release publishing\n * 2026-04-28: Fix RFC3339 formatting for high-precision secfrac\n * 2026-04-25: queue: quarantine runtime disk corruption safely\n * 2026-04-25: imfile test: stabilize async logrotate drain\n * 2026-04-25: Add security policy\n * 2026-04-24: imhttp: harden request parsing and cleanup (#6758)\n * 2026-04-24: imdocker: stabilize image-name test\n * 2026-04-23: omuxsock: fix message loss bug for connected Unix domain sockets (#6750)\n * 2026-04-23: imfile: release deleted-file FDs after FILE_DELETE_DELAY in inotify mode\n * 2026-04-23: .codex: restore wrapped git commit hook matching\n * 2026-04-22: omusrmsg: guard empty systemd session lists\n * 2026-04-22: omfwd: avoid recursive target teardown\n * 2026-04-22: fmhash: fix build issue\n * 2026-04-22: doc: update modules documentation (#6714)\n * 2026-04-21: prepare for next scheduled stable release cycle\n * 2026-04-20: style: format obj helper declaration\n * 2026-04-20: style: drop redundant cstr null checks\n * 2026-04-20: queue: harden corrupt disk queue recovery\n * 2026-04-20: queue: delete orphaned disk queue write files\n * 2026-04-20: prepare for 8.2604.0 release\n * 2026-04-20: omfwd: flush pending data before zip teardown\n * 2026-04-20: imptcp: harden stream compression handling\n * 2026-04-20: doc: shrink ROSI architecture image in dist\n * 2026-04-19: imfile: harden state file handling\n * 2026-04-19: core: harden string allocation and copy handling\n * 2026-04-18: omotel: ignore generated protobuf tree\n * 2026-04-18: imkafka: harden worker startup and teardown\n * 2026-04-18: imhiredis: place stream index helper before use\n * 2026-04-18: imhiredis: harden stream index parsing and setup\n * 2026-04-18: imdocker: harden setup and URL construction\n * 2026-04-18: imdocker,imhiredis: fix curl teardown and style\n * 2026-04-17: imudp,imdtls: harden listener setup paths\n * 2026-04-17: imdtls: disable failed listeners cleanly\n * 2026-04-17: gssapi: fix token timeout handling\n * 2026-04-17: gssapi: fix interrupted token io loops\n * 2026-04-17: doc: clarify severity-aware shared ratelimit use\n * 2026-04-16: imjournal: harden state file handling\n * 2026-04-16: im3195: harden RFC3195 callback handling\n * 2026-04-16: gssapi: improve robustness and listener handling\n * 2026-04-15: runtime: harden queue config and worker handling\n * 2026-04-15: omfile: harden dynafile cache validation\n * 2026-04-15: omfile: address review follow-up cleanups\n * 2026-04-14: omrelp: use stable data in librelp callbacks\n * 2026-04-14: omrelp: use generic code in onErr\n * 2026-04-14: omfwd: support musl resolver APIs\n * 2026-04-14: omelasticsearch: fix port detection for IPv6 server addresses\n * 2026-04-14: imhttp: add route-scoped API key authentication\n * 2026-04-14: configure: reduce resolver link probe\n * 2026-04-14: configure: link resolver libs on solaris\n * 2026-04-14: configure: gate omfwd resolver APIs\n * 2026-04-13: runtime: add watched policy reload scheduling\n * 2026-04-13: ratelimit: free dropped TCP messages on helper errors\n * 2026-04-13: [Modernization] Replace Internal Backticks with Shell Expansion: Misc test files\n * 2026-04-13: Add missing mmdb files to tests/Makefile.am\n * 2026-04-12: runtime: cleanup zero-size alloc handling\n * 2026-04-12: rsconf: clarify stale loadConf comments\n * 2026-04-12: ratelimit: keep TCP batch processing on drops\n * 2026-04-12: omhttp: harden payload length handling\n * 2026-04-12: imuxsock: bound per-pid ratelimiter cache\n * 2026-04-12: imtcp: harden limit validation and worker shutdown\n * 2026-04-12: impstats: clean up minor report nits\n * 2026-04-12: fix(imtcp): fix typos and remove duplicate assignments in imtcp.c\n * 2026-04-12: Fix for Unused import\n * 2026-04-12: Fix for File is not always closed\n * 2026-04-11: add compression option with new test and changed request building\n * 2026-04-09: runtime: harden stringbuf contains matching\n * 2026-04-09: runtime: harden TCP framing size handling\n * 2026-04-08: mmutf8fix: also fix invalid UTF-8 in RFC 5424 structured data\n * 2026-04-07: ratelimit: watch YAML policy files with debounce\n * 2026-04-06: [Modernization] Replace Internal Backticks with Shell Expansion\n * 2026-04-06: Discard partial map/array objects on error\n * 2026-04-04: doc: document omfwd connection statistics\n * 2026-04-03: runtime: map common legacy selector actions to YAML\n * 2026-04-03: runtime: harden YAML string-node OOM handling\n * 2026-04-03: runtime: emit structured YAML for simple translations\n * 2026-04-03: grammar: fix YAML script buffer filename leak\n * 2026-04-02: runtime: add config translation mode\n * 2026-03-31: omelasticsearch: suspend action on 5xx or 429 HTTP status codes\n * 2026-03-31: omelasticsearch: check HTTP status code in checkConn health check\n * 2026-03-31: [build]: require OpenSSL if imdtls or omdtls is used\n * 2026-03-30: mmjsontransform: reload transformation mode from policy\n * 2026-03-30: mmjsontransform: add YAML policy processing\n * 2026-03-30: build: stop shipping .gitignore files\n * 2026-03-30: [codex] doc: fix random sampling example (#6678)\n * 2026-03-30: [General]: Install tzdata in default docker image\n * 2026-03-30: Fix DoS in imjournal sd_journal_wait\n * 2026-03-29: doc: remove stray merge marker in deployments index\n * 2026-03-29: doc: clarify YAML positioning and workflow guidance\n * 2026-03-28: yamlconf: warn on duplicate top-level keys, document as unsupported\n * 2026-03-28: scripts: add doc-xref-sync linter check for broken :doc: references\n * 2026-03-28: doc: register design_decisions.rst in EXTRA_DIST\n * 2026-03-28: doc(yamlconf): fix EXTRA_DIST entry and cross-reference path\n * 2026-03-28: doc(yamlconf): add architecture doc, expand RainerScript relation\n * 2026-03-28: doc(yaml_config): add version requirement note (8.2604.0+)\n * 2026-03-28: doc(conf_formats): use FmtYamlName macro, fix macro-in-bold issue\n * 2026-03-28: doc(conf_formats): add YAML as fourth format option, cross-link pages\n * 2026-03-27: test(yaml-unset): guard against false pass when verify file is absent\n * 2026-03-27: refactor(yamlconf): extract nvlst helper, add Doxygen, fix test coverage\n * 2026-03-27: feat: add YAML as an alternative configuration format\n * 2026-03-27: docs(agents): add rsyslog_config skill and config parity guidance\n * 2026-03-27: doc(yamlconf): improve completeness of YAML config reference\n * 2026-03-27: doc(yamlconf): fix malformed RST grid table (Set row off by one space)\n * 2026-03-27: devtools: add repo-local Codex commit hook\n * 2026-03-26: feat: add YAML as an alternative configuration format\n * 2026-03-26: feat(yamlconf): add filter/actions shortcut for rulesets\n * 2026-03-25: omhttp: reuse curl handles and coordinate health checks\n * 2026-03-25: omhttp: fix shared health state and gzip headers\n * 2026-03-24: gtls: check CRL expiration, reject connections with expired CRL\n * 2026-03-23: doc: imptcp: remove outdated 16-thread limit note\n * 2026-03-21: doc/container: mark ETL image experimental\n * 2026-03-20: update doc url in README.md\n * 2026-03-20: doc: sync container docs with current images\n * 2026-03-20: doc: fix ROSI link audience in overview pages\n * 2026-03-19: doc: link ROSI references to overview page\n * 2026-03-19: doc: improve ROSI navigation and scope notes\n * 2026-03-19: doc: broaden ROSI framing beyond collector\n * 2026-03-18: doc: document Windows clients in ROSI Collector\n * 2026-03-18: doc: add ROSI stack deployment tutorial\n * 2026-03-16: omfwd: add num.connects statistic for TCP connection tracking\n * 2026-03-16: imfile: preserve symlink cleanup notifications with deferred destroy\n * 2026-03-16: core: Fix typos in comments\n * 2026-03-13: doc: Fix Mermaid diagrams and unify build output to build/\n * 2026-03-11: tls: add native post-quantum guidance and tests\n * 2026-03-11: packaging: add Ubuntu package build CI for focal, jammy, noble\n * 2026-03-10: docs: clarify PrioritizeSAN fallback behavior and auth mode prerequisite\n * 2026-03-10: Add azure Monitor API ingestion module\n * 2026-03-04: Use suggested error handling when node becomes NULL mid-loop\n * 2026-03-04: Remove \"ifdef json_type_uint64\"\n * 2026-03-04: Discard partial map/array objects on error\n * 2026-03-04: Add uint64 handling if it is supported\n * 2026-03-03: rpm: packaging overhaul, CI job, and review fixes\n * 2026-03-02: imjournal documentation: FileCreateMode was introduced in v8.2306.0\n * 2026-03-02: docs: remove -c5 from troubleshooting example\n * 2026-02-27: Revert \"docs: Add ROSI Collector Hetzner Cloud tutorial\"\n * 2026-02-26: ratelimit: wire ratelimit.name into remaining modules\n * 2026-02-26: omusrmsg: add ratelimit support\n * 2026-02-26: omkafka: add poll thread; fix races and deprecated usleep\n * 2026-02-26: imrelp: add ratelimit support (interval, burst, name)\n * 2026-02-26: Stop all outer recursive loops in MAP case on corrupted data\n * 2026-02-26: Skip truncated field\n * 2026-02-26: Replace Variable-Length Array with fixed sized one\n * 2026-02-26: Address style/formatting issues\n * 2026-02-26: Add json NULL checks\n * 2026-02-25: packaging: Update RHEL Docker Build Image\n * 2026-02-25: omotel: add native protobuf encoding (http/protobuf)\n * 2026-02-25: docs: Add ROSI Collector Hetzner Cloud tutorial\n * 2026-02-25: doc: add deterministic HTML link validation in docs CI\n * 2026-02-25: Update mmdblookup so it does not rely on JSON dump\n * 2026-02-24: doc: fix stale relative links causing malformed paths\n * 2026-02-24: doc: bump footer copyright year to 2026\n * 2026-02-24: doc: add ROSI guides and beginner infographic\n * 2026-02-24: Codex/process GitHub issue 4697 (#6582)\n * 2026-02-23: runtime: close worker-start cancellation race\n * 2026-02-22: doc: update canonical location for doc set\n * 2026-02-18: tools: fix linking issue with libyaml\n * 2026-02-18: runtime: refactor dynstats meta-counter name assembly\n * 2026-02-18: prepare for next scheduled stable release cycle\n * 2026-02-18: doc: fix release_string_detail NameError, narrow deploy to main only\n * 2026-02-18: doc: add GitHub Actions workflow to deploy docs with GA to Pages\n * 2026-02-18: doc: add GA support with input validation and fallback (#6561)\n * 2026-02-18: core: expand checked literal copies across fixed buffers\n * 2026-02-17: doc: add optional Google Analytics via sphinxcontrib-googleanalytics (#6559)\n * 2026-02-17: ChangeLog: correct overhyped feature\n * 2026-02-17: ChangeLog: add missing entry * 2026-06-23: bump version number for scheduled stable release\n * 2026-02-16: configure: default-enable impstats push build support (#6542)\n * 2026-02-16: better handle copy of constant string to ip address buffer (#6557)\n * 2026-02-13: imjournal: fix stats counter type for uint64 fields\n * 2026-02-13: doc: restructure impstats reference for clearer modes\n * 2026-02-13: doc: expand impstats push docs and FAQ coverage\n * 2026-02-13: doc: describe impstats push mode for VictoriaMetrics\n * 2026-02-13: doc: add impstats VictoriaMetrics push tutorial\n * 2026-02-11: runtime: iterate ptcp addresses and validate bind device\n * 2026-02-11: feat(rosi-collector): impstats sidecar on server, Grafana rate limits, docs\n * 2026-02-08: packaging/docker: trim ubuntu24 image build artifacts\n * 2026-02-08: omhttp: add VictoriaLogs jsonline CI test\n * 2026-02-08: curl modules: pass long literal to CURLOPT_POST\n * 2026-02-06: omhttp: reuse reply buffer with cap and safer sizing\n * 2026-02-06: github action security follow up (#6532)\n * 2026-02-06: build: normalize object prototypes and remove decl noise\n * 2026-02-04: Sentinel: Fix buffer overflow risk in datetime formatting\n * 2026-02-04: doc: fix conflict markers in omhdfs-omhdfsport.rst\n * 2026-02-04: Fix infinite loop in re_extract when regex matches empty string\n * 2026-02-04: Codex/fix issue #6517 in rsyslog (#6520)\n * 2026-02-03: runtime: lower internal message rate defaults\n * 2026-02-03: rosi-collector: add Syslog Health (impstats) dashboard and client sidecar\n * 2026-02-03: doc: improve sparseArray doc and suggest is_in_subnet\n * 2026-02-03: doc/ommail: correct CRLF escaping; bind body template\n * 2026-02-03: Fix lookup table reload race condition (Device or resource busy)\n * 2026-02-03: Fix build failure with OpenSSL 3.4.3+ due to deprecated ENGINE API\n * 2026-02-03: Codex/add documentation for pcre matching (#6509)\n * 2026-02-02: runtime: include IPv6 scope id in DNS cache keys\n * 2026-02-01: ossl: make OCSP requests non-blocking with caching\n * 2026-01-31: runtime: fix srUtilItoA() data type inconsistencies\n * 2026-01-31: impstats: add VictoriaMetrics push via Remote Write\n * 2026-01-30: stream: lock open/init and defer error log\n * 2026-01-30: runtime: call class exit on lib unload\n * 2026-01-30: nsd_ossl: abort failed handshakes\n * 2026-01-29: runtime: clarify atomic helper usage\n * 2026-01-29: queue: fix slow drain of disk-assisted queues\n * 2026-01-29: queue: fix DA worker infinite loop regression from commit 4748c5746\n * 2026-01-29: imkafka: add JSON batch splitting for Azure Event Hub\n * 2026-01-29: fix(obj): use best-effort atomics for ifIsLoaded to eliminate TSAN warnings\n * 2026-01-28: omfile: pass size-limit file to rotate cmd\n * 2026-01-28: configure: fix xxhash library check missing error action\n * 2026-01-25: imtcp: add MultiLine and regex framing support\n * 2026-01-25: SQUASH: some fixes\n * 2026-01-24: template: add omitIfZero option to property()\n * 2026-01-24: agent/skills: standardize test registration and mock check\n * 2026-01-23: tools: honor main_queue name override\n * 2026-01-23: skills: implement extended documentation distribution check\n * 2026-01-23: fix(tools): graceful exit on recvfrom error in wait_timeout\n * 2026-01-23: doc: refine memory auditor guidelines with CHKmalloc and NULL checks\n * 2026-01-23: core: streamline agent instructions with modular skills\n * 2026-01-23: action: add batchesprocessed pstats counter\n * 2026-01-22: imfile: add inode generation check for file rotation detection\n * 2026-01-21: sidecar: add rsyslog impstats exporter\n * 2026-01-19: ossl: add OCSP certificate revocation checking support\n * 2026-01-17: nitfix: add output files to .gitignore\n * 2026-01-17: imfile: add inotify fallback rescans on watch limits\n * 2026-01-17: doc: add imfile new parameter doc\n * 2026-01-16: queue: harden disk recovery after invalid .qi\n * 2026-01-16: core: fsync+atomic rename for pid file; abort on failure\n * 2026-01-16: build: move doc EXTRA_DIST into doc/Makefile.am\n * 2026-01-15: mmanon: add retry limit + fallback for unique randomization (#6444)\n * 2026-01-14: Improve test infrastructure: fix core dump race condition\n * 2026-01-13: fix pmlastmsg.c typo error\n * 2026-01-13: docs: Add Core Philosophy page\n * 2026-01-13: doc: deprecate omruleset; add call migration guide\n * 2026-01-12: rainerscript: add is_in_subnet() built-in\n * 2026-01-12: omhiredis: remove unneded param name from param table\n * 2026-01-12: omfile: fix pszSizeLimitCmd leak; own copy from outchannel\n * 2026-01-12: nitfix: code style\n * 2026-01-12: imfile: guard statefile unlink and honor RMStateOnMove\n * 2026-01-12: doc: imhttp: document ability to bind to specific IP addresses\n * 2026-01-12: doc: add FAQ about blocking actions and queues\n * 2026-01-12: core: make action state changes output better debug info\n * 2026-01-09: action: guard worker instance check on non-atomic builds\n * 2026-01-09: Fix: Use __has_include to check for rabbitmq-c headers\n * 2026-01-09: Fix imjournal test race condition with parallel execution\n * 2026-01-08: contrib/imczmq,omczmq: add CZMQ 4.2+ version guards\n * 2026-01-07: runtime: fix race condition in worker thread cancellation\n * 2026-01-07: runtime: fix inconsistent synchronization of iCurNumWrkThrd\n * 2026-01-07: runtime: fix TOCTOU race in worker thread creation\n * 2026-01-07: omsnmp: fix legacy config path and session strings\n * 2026-01-06: runtime: fix race condition in worker thread startup\n * 2026-01-06: runtime: fix critical data race in wtpSetState()\n * 2026-01-06: lmsig_ksi: remove unused REPORT_PARAM_MISSING macro\n * 2026-01-06: Fix mmsnareparse test data files missing in make dist\n * 2026-01-05: tcpflood: nitfix w/ compiler warning when DTLS is not configured\n * 2026-01-05: rainerscript: add split() function\n * 2026-01-05: doc: optimize agent build instructions for efficiency\n * 2026-01-05: doc: add sparseArray lookup IPv4 subnet matching example\n * 2026-01-05: core/AIX: fix an hard exit() on certain failure at AIX\n * 2026-01-05: Refactor duplicate string copy logic in msg.c\n * 2026-01-05: Refactor Prometheus stats generation to a separate function\n * 2026-01-04: queue: re-implement queue size warnings\n * 2026-01-04: doc: imrelp: clarify missing MaxSessions and session stats (#6414)\n * 2026-01-03: runtime/ratelimit: annotate ratelimit nonnull contracts\n * 2026-01-02: tcpsrv: restore default stack size assignment\n * 2026-01-02: runtime/nsd_ossl.c: fix authmode authorization bypass\n * 2026-01-02: integer parsing more robust\n * 2026-01-01: core, runtime, omfwd: plumb action name into modules and logs\n * 2025-12-31: core: improve some important inline documentation\n * 2025-12-30: omelasticsearch fix: potential NULL dereference\n * 2025-12-30: msg, docs: document jsonMerge overwrite; drop TODO\n * 2025-12-30: imjournal: make PRIORITY parsing robust and quiet\n * 2025-12-29: ratelimit: add named policies; wire into imtcp/imptcp\n * 2025-12-29: docs: add module template and tighten RST AI authoring rules\n * 2025-12-29: build: add missing doc files to EXTRA_DIST\n * 2025-12-28: ossl: fix ctx double-free and config string leaks\n * 2025-12-28: omkafka fix: double-free of kafkaheader if used\n * 2025-12-28: imjournal: remove unused ctrPollFailed\n * 2025-12-27: Add rsyslog-doc AI assistant prompt and update meta-docs\n * 2025-12-26: Update tests/omfwd_rebind_udp.sh\n * 2025-12-25: runtime/rsksi: check KSI_DataHash_extract return values\n * 2025-12-25: Architectural Analysis of Rsyslog Core (#6390)\n * 2025-12-24: rainerscript: ensure parse_json consumes entire input string\n * 2025-12-24: rainerscript: add split() function\n * 2025-12-24: omfwd: fix RebindInterval suspension and improve UDP cleanup\n * 2025-12-24: docs: refactor AGENTS.md for agent clarity, safety, and precision\n * 2025-12-23: rainerscript: ensure parse_json consumes entire input string\n * 2025-12-23: fix improper \":json:\" use\n * 2025-12-23: doc: fix version (accidentally not updated)\n * 2025-12-23: Update doc/source/reference/parameters/omudpspoof-template.rst\n * 2025-12-22: nitfix: code style violations\n * 2025-12-22: netstream ossl driver: small fix in meta information\n * 2025-12-22: doc: add RAG Knowledge Base extraction and build integration\n * 2025-12-21: docs: formalize defensive coding and assertion patterns\n * 2025-12-21: doc: modernize and expand queue concept documentation\n * 2025-12-21: doc: fix missing EXTRA_DIST entry\n * 2025-12-19: rsyslog-ossl: Prevent double close of socket fd\n * 2025-12-19: impstats: add log.file.overwrite parameter for atomic overwrites\n * 2025-12-19: doc: update agent guidelines to require documentation for new parameters\n * 2025-12-17: omudpspoof: update RainerScript examples\n * 2025-12-17: imjournal: fix potential segfault (SIGBUS)\n * 2025-12-17: doc: fix RST syntax errors in parameter documentation\n * 2025-12-17: Remove macos-13 from CI and weekly jobs\n * 2025-12-17: Fix doc build CI security, spelling, and RST build errors\n * 2025-12-16: omudpspoof: fix module template example\n * 2025-12-16: Refactor: rename omotlp module to omotel\n * 2025-12-15: doc: unify mmanon random-consistent-unique text\n * 2025-12-15: Add support healthchecktimedelay into omhttp\n * 2025-12-11: omudpspoof: split parameter docs into reference pages\n * 2025-12-11: omudpspoof: correct parameter scopes in references\n * 2025-12-11: omudpspoof: align parameter casing with camelCase guidance\n * 2025-12-11: omsnmp: align parameter heading with module scope (#6354)\n * 2025-12-11: Codex/refactor rsyslog parameter documentation n6uh16 (#6345)\n * 2025-12-11: Codex/refactor module parameter documentation atexhg (#6355)\n * 2025-12-11: Codex/refactor module parameter documentation (#6349)\n * 2025-12-11: Codex/refactor module documentation into parameter files (#6348)\n * 2025-12-05: prepare for next daily stable cycle\n * 2025-12-05: omdtls: fix incorrect usage of gai_strerror\n * 2025-12-05: mmjsontransform: fix compiler warning\n * 2025-12-05: core: fix LogError(0, ...) anti-pattern and add guidelines\n * 2025-12-05: build: fix missing test files in dist tarball\n * 2025-12-04: omhiredis: Allow to define a name to instance and use it in logs\n * 2025-12-04: doc: fix some small glitches\n * 2025-12-03: packaging/docker: add TLS support to collector image\n * 2025-12-03: mmanon: better document externalized function part\n * 2025-12-03: docs: clarify coding practices path in prompts\n * 2025-12-03: docs: add assert-plus-fallback helper guidance\n * 2025-12-03: docker/collector: always load imtcp module\n * 2025-12-03: doc: handle backslash continuations in rsyslog lexer\n * 2025-12-03: doc: add contract pattern for externalized helpers\n * 2025-12-02: mmanon: fix spacing for format\n * 2025-12-02: doc: fix omlibdbi parameter examples\n * 2025-12-02: New functionality for omuxsock (#5630)\n * 2025-12-01: omuxsock documentation changes\n * 2025-12-01: mmanon: tidy inline comments\n * 2025-12-01: imtcp: add NetworkNamespace\n * 2025-12-01: Codex/refactor rsyslog parameter documentation 8z2p3x (#6327)\n * 2025-11-30: omfwd: add DNS SRV discovery (targetSrv)\n * 2025-11-28: feat(deploy): add ROSI Collector centralized log collection stack\n * 2025-11-28: Codex/refactor rsyslog parameter documentation (omjournal) (#6309)\n * 2025-11-26: doc: add TLS example for omelasticsearch\n * 2025-11-25: mmsnareparse: make regex trailing search limit configurable\n * 2025-11-25: mmanon: fix races in IPv4 trie and IPv6 hash access (#6315)\n * 2025-11-25: doc: add SETUP, BUILD, TEST agent task keywords\n * 2025-11-25: Codex/refactor rsyslog module parameter documentation wnkysy (#6311)\n * 2025-11-24: mmsnareparse: add parameter ignoreTrailingPattern.regex\n * 2025-11-21: mmsnareparse: add ignoreTrailingPattern parameter\n * 2025-11-21: build: Add code coverage targets\n * 2025-11-18: doc: some nitfixes to historical doc\n * 2025-11-18: doc: add conceptual model summaries\n * 2025-11-18: Codex/refactor omdtls documentation for parameters (#6298)\n * 2025-11-17: mmsnareparse: add Sysmon event support via JSON definition file\n * 2025-11-17: doc: add json-ld (basic schema) (#6303)\n * 2025-11-14: doc: restructure and modernize project history; add origins page and xrefs\n * 2025-11-14: container: add libyaml to some dev containers\n * 2025-11-14: Fix: Remove stray/unwanted 'rsyslog' subproject\n * 2025-11-14: Codex/refactor rsyslog module documentation parameters (#6296)\n * 2025-11-12: omhttp - Add two profile for Splunk HEC (#6150)\n * 2025-11-12: fix codestyle issue (minor)\n * 2025-11-12: Codex/refactor rsyslog parameter documentation fvn43p (#6290)\n * 2025-11-12: Codex/refactor rsyslog module parameter documentation omgssapi (#6294)\n * 2025-11-09: doc: add FAQ if rsyslog runs on windows\n * 2025-11-07: Implement Kafka Metrics, new pstats format (#6154)\n * 2025-11-06: fix typo in European mirror link (https vs. http)\n * 2025-11-06: doc: clarify release channels in versioning guide (#6289)\n * 2025-11-05: doc: add release version number semantic info (#6286)\n * 2025-11-05: Codex/refactor rsyslog module parameter documentation s7jgy3 (#6277)\n * 2025-11-05: Codex/refactor rsyslog module parameter documentation p47sz4 (#6285)\n * 2025-11-05: Codex/refactor rsyslog module parameter documentation khpye2 (#6276)\n * 2025-11-05: Codex/refactor rsyslog module parameter documentation bn356b (#6287)\n * 2025-11-05: Codex/refactor rsyslog module documentation b6q3fv (#6281)\n * 2025-11-04: feat(imhiredis): Add support for TLS in imhiredis (#21)\n * 2025-11-03: nsd_gtls: fix repeated warnings on connection retry + test\n * 2025-11-03: content_count_check: use optional file argument if provided\n * 2025-11-03: README.md Updates for clarity and content (#6282)\n * 2025-11-03: Enhance README with Table of Contents and new sections (#6283)\n * 2025-10-31: tcpsrv: stop workers before destruction\n * 2025-10-31: PoC: rsyslog ETL pipeline container for sending to vespa.ai\n * 2025-10-30: omhttp - Stats by destination server (#6141)\n * 2025-10-30: Fix typos: corrected 'intial' to 'initial' and 'intialize' to 'initialize'\n * 2025-10-30: Codex/refactor rsyslog module parameter documentation rgp0jv (#6256)\n * 2025-10-30: Codex/refactor module name parameters documentation (#6250)\n * 2025-10-30: Add support for TLS in omhiredis (#17)\n * 2025-10-29: omelasticsearch: add apikey authentication\n * 2025-10-29: doc: fix trailing whitespace in man pages\n * 2025-10-29: doc: add faq entry for rsyslog as etl tool (#6272)\n * 2025-10-29: doc: add FAQ for sending data to vespa.ai\n * 2025-10-24: doc/build: ship vendor/tools; make sitemap opt-in\n * 2025-10-24: action.c: reordered actionDestruc\n * 2025-10-23: doc: enable sphinx sitemap generation for html output\n * 2025-10-22: doc: vendor mermaid assets and fix offline viewing\n * 2025-10-22: doc: update SIGINT signal documentation in man page\n * 2025-10-20: doc: make git optional for Sphinx builds (dist tarballs)\n * 2025-10-20: doc: enable parallel Sphinx builds; silence edit_on_github\n * 2025-10-17: Add doc for mbedtls driver\n * 2025-10-15: bump version number for 8.2512 series\n * 2025-10-15: Doc: Minor spelling and typing mistakes (#6242)\n * 2025-10-15: Codex/refactor rsyslog imklog module parameter documentation (#6246)\n * 2025-10-13: Codex/refactor parameter documentation for imkafka (#6243)\n * 2025-10-11: core: stop busy-loop when action disables itself\n * 2025-10-11: Add MbedTLS netstream driver.\n * 2025-10-10: Codex/refactor rsyslog imgssapi module parameter documentation (#6239)\n * 2025-10-10: Codex/refactor rsyslog imdiag module parameter documentation (#6235)\n * 2025-10-09: prepare for 8.2510.0 scheduled stable release\n * 2025-10-09: ossl bugfix: ensure peer cert is freed in osslChkPeerAuth\n * 2025-10-09: omotlp: introduce OTLP/HTTP log exporter\n * 2025-10-07: mysql: stabilize async ommysql workers via proper thread init\n * 2025-10-07: imptcp: fix null pointer dereference in error logging\n * 2025-10-07: docs: add Agent Chat Keywords to AGENTS.md\n * 2025-10-06: feat: Trigger macOS workflow on relevant file changes\n * 2025-10-06: doc: im prove log pipeline documentation\n * 2025-10-06: doc: clarify reliable forwarding examples\n * 2025-10-06: Fix: Make RSYSLOG_DYNNAME generation POSIX-compliant\n * 2025-10-05: doc: refresh database and PRI tutorials\n * 2025-10-05: doc: improve mmjsonparse documentation\n * 2025-10-05: Codex/refactor rsyslog parameter documentation 68okf4 (#6219)\n * 2025-10-04: mmjsonparse: add find-json mode for embedded JSON\n * 2025-10-04: Codex/refactor rsyslog module documentation (#6215)\n * 2025-10-04: CI,DIST: build docs from 'make dist' tarball\n * 2025-10-02: test: Enable Valgrind for manytcp-too-few-tls-vg.sh\n * 2025-10-02: Increase message loss tolerance in TargetFail test\n * 2025-10-01: template: fix lenStr for subtree rendering\n * 2025-10-01: mmjsontransform: add experimental JSON dotted-key (un)flatten\n * 2025-09-29: omkafka: restore producev fallback for older librdkafka\n * 2025-09-29: omelasticsearch: implement target platform check (#6197)\n * 2025-09-29: mmexternal: split parameter in doc (#6193)\n * 2025-09-29: imtcp: Improve peer logging to include source ports (#6198)\n * 2025-09-29: CI containers: include mbedtls test environment\n * 2025-09-28: imdiag/tests/docs: use RFC5737 test IP in samples\n * 2025-09-28: Codex/refactor parameter documentation for mmjsonparse (#6189)\n * 2025-09-27: doc: split property documentation into separate files\n * 2025-09-26: docs: add agent guides and module metadata scaffolding\n * 2025-09-26: mmanon: split parameter docs into reference\n * 2025-09-25: omelasticsearch: omit _type by default; use typeless endpoint\n * 2025-09-25: doc: update imjournal journald warning\n * 2025-09-24: template: add jsonftree option for nested jsonf output\n * 2025-09-24: mmfields: split parameter docs into reference pages\n * 2025-09-23: omusrmsg bugfix: potential null pointer dereference causes segfault\n * 2025-09-23: omfile: enable addLF by default\n * 2025-09-23: mmsnarewinsec: comprehensive Windows Security Event Log parser\n * 2025-09-23: doc: improve subtree, list template documentation\n * 2025-09-23: doc: further improve template doc\n * 2025-09-23: Update doc/source/reference/templates/templates-type-list.rst\n * 2025-09-23: Codex/refactor module documentation for mmdblookup\n * 2025-09-22: omfile: add addLF option to append newline (#6165)\n * 2025-09-22: Codex/refactor rsyslog parameter documentation inmmexternal\n * 2025-09-22: Codex/document mmaudit plugin with sphinx (#6167)\n * 2025-09-20: tests/omelasticsearch: align suite with ES 7.14, reduce flakiness\n * 2025-09-19: refactor rsyslog parameter documentation mmdarwin\n * 2025-09-19: refactor rsyslog parameter documentation mmcount\n * 2025-09-19: refactor rsyslog module parameter documentation mmaitag\n * 2025-09-18: omazureeventhubs: fix data races and suppressions\n * 2025-09-18: mmleefparse: new message modification module for LEEF format\n * 2025-09-17: doc: Add helper scripts to build documentation\n * 2025-09-17: * imtcp: warn on TLS handshakes received on plain listeners\n * 2025-09-16: refactor rsyslog parameter documentation mmutf8fix\n * 2025-09-15: fix config error on systems with pkg-config but not libgcrypt-config\n * 2025-09-15: docs/getting_started: add AI assistants page\n * 2025-09-15: doc: new beginner tutorials\n * 2025-09-15: dev container: do not work-around libgcrypt dev interface change\n * 2025-09-13: doc: describe regex lookup table type\n * 2025-09-13: Codex/refactor rsyslog parameter documentation for mmtaghostname\n * 2025-09-12: logctl tool: fix mongoc.h include location\n * 2025-09-12: docs: fix doc build instructions (Sphinx 4.5+, main, monorepo) (#6114)\n * 2025-09-12: docker: fix collector, udp and tcp could not be enabled individually\n * 2025-09-12: docker: enhancements to debian sid and ubuntu 24.04 dev container\n * 2025-09-12: docker: add relp listener to rsyslog \"collector\"\n * 2025-09-12: doc: document compactjsonstring global option (#6127)\n * 2025-09-12: doc: better doc for rsyslog collector container\n * 2025-09-12: core: add doxygen comments to errmsg object\n * 2025-09-11: refactor rsyslog module parameter documentation for mmsnmptrapd\n * 2025-09-11: net: Add NetworkNamespace APIs\n * 2025-09-11: imtcp support for NetworkNamespace * 2026-02-16: prepare for 8.2602.0 scheduled stable release\n * 2025-09-10: tls: process TLS 1.3 KeyUpdate during send (ossl/gtls)\n * 2025-09-10: improve original patch\n * 2025-09-10: docker: update Debian 13 build to inlcude more modules\n * 2025-09-10: doc: improg had a strangely worded limitation listed - corrected (#6115)\n * 2025-09-10: Update doc/README.md\n * 2025-09-09: doc: update reference section on doc structure\n * 2025-09-09: core: add setting to permit compact json format\n * 2025-09-09: Codex/refactor rsyslog module parameter documentation mmrfc5424addhmac\n * 2025-09-09: CI remove old kafka codecov builder now the new one is present\n * 2025-09-06: doc: document git path resolution\n * 2025-09-06: devtools: Specify usage of clang-format-18 to pin v18\n * 2025-09-05: rainerscript: add toupper() function\n * 2025-09-05: misc: add void parameter lists\n * 2025-09-05: doc: restore missing doc files in configure.ac\n * 2025-09-04: imhttp: guard handler registration\n * 2025-09-04: devtools: use codecov uploader in CI script\n * 2025-09-04: config script: add b64_decode function\n * 2025-09-04: Update devtools/run-ci.sh\n * 2025-09-04: Codex/refactor rsyslog parameter documentation ejsnoq (#6085)\n * 2025-09-03: runtime: fix Darwin build regressions and improve BSD portability\n * 2025-09-03: omkafka: allow sending static headers\n * 2025-09-03: mmpstrucdata: split parameter docs into reference pages\n * 2025-09-03: mmpstrucdata: fix action parameter anchors and casing\n * 2025-09-03: imdocker: Add image name to metadata fields\n * 2025-09-03: code style: fix macro formatting\n * 2025-09-03: ci(docs): add PR preview workflow via Actions Pages\n * 2025-09-03: Implement omhttp batching and performance improvements\n * 2025-09-03: Codex/refactor rsyslog parameter documentation (#6074)\n * 2025-09-02: omsnmp: restructure (#6063)\n * 2025-09-02: imrelp: fix potential segfault on termination (#5600)\n * 2025-09-02: core: add fromhost-port message property\n * 2025-08-28: tools/rsyslog.conf.5: fix example Port= value\n * 2025-08-28: rainerscript: warn on excessive random range\n * 2025-08-28: queue: refactor batch deletion with explicit phases (#6013)\n * 2025-08-28: omsendertrack: \"fix\" static analyzer reported issue\n * 2025-08-28: doc: work around a spellcheck restriction\n * 2025-08-28: doc: note AI authorship\\n\\nAI-Agent: ChatGPT\n * 2025-08-28: core: some code cleanup\n * 2025-08-28: community: disable automatic welcome action\n * 2025-08-28: code cleanup (rephrasing false postive commented out code)\n * 2025-08-27: improve PR welcome message handling\n * 2025-08-27: docs: fix typo ('begin' -\u003e 'beginning') in developer documentation (#6029)\n * 2025-08-27: docs: fix minor typos in docs/source (#6028)\n * 2025-08-27: doc: fix assorted typos across documentation\n * 2025-08-27: debug version of welcome script\n * 2025-08-27: community: some fixes to \"welcome\" helper action\n * 2025-08-27: community: add welcome message to first few commits (#6032)\n * 2025-08-27: codeql: fix \"master\" branch reference\n * 2025-08-27: Potential fix for code scanning alert no. 44: Commented-out code\n * 2025-08-27: Add actions analysis\n * 2025-08-26: prepare for next scheduled stable release cycle\n * 2025-08-26: docs: add rsyslog issue assistant build files (#6026)\n * 2025-08-26: dev doc: mention \"good first issue\" dashboard\n * 2025-08-26: Update README.md\n * 2025-08-25: prepare for daily stable 8.2508.0 release\n * 2025-08-25: fix: doc/ not in tarball (in progress)\n * 2025-08-25: doc: add code of conduct\n * 2025-08-24: omrelp: add TCP keepalive configuration\n * 2025-08-23: immark: document config cleanup\n * 2025-08-23: imdocker: free temp buffer after log option parse\n * 2025-08-22: tcpsrv: revert PR 5806 because it was ineffective\n * 2025-08-22: tcpsrv: refactor IO loop; rearm-before-unlock; poll path\n * 2025-08-22: imjournal: initialize instance fields to avoid invalid free\n * 2025-08-22: imdocker: fix cosmetic memory leak\n * 2025-08-21: runtime/tcpsrv: drop obsolete inQueue handling\n * 2025-08-21: omhttp: guard rest path template access\n * 2025-08-21: mmaitag: fix potential memory leak\n * 2025-08-21: doc: restructure templates docs into hub and refs\n * 2025-08-21: doc: restore property statement context\n * 2025-08-21: core: code cleanup, avoid dead assignment\n * 2025-08-21: core/nsd_ptcp: zero addr before getpeername()\n * 2025-08-20: tcpsrv: stop loop after closeSess to avoid use-after-free\n * 2025-08-20: omprog: split parameter docs into reference pages\n * 2025-08-20: omfwd: document and enforce pool-level suspend semantics\n * 2025-08-20: Update README.md - notification channels\n * 2025-08-20: Update .github/instructions/modules.plugins.instructions.md\n * 2025-08-19: imhttp: optional auth + Content-Length for metrics/health\n * 2025-08-19: doc: make AI-First concrete; add guardrails and CI proof\n * 2025-08-19: atomic: remove trailing semicolons from helper macros\n * 2025-08-18: template: fix missing lenStr in subtree templates\n * 2025-08-18: tcpflood: omit delimiter for octet frames\n * 2025-08-18: serialize TLS session setup to avoid data race\n * 2025-08-18: runtime: fix NetstreamDriverCAExtraFiles parsing\n * 2025-08-18: omsendertrack: stop towards full completion of module.\n * 2025-08-18: omhttp: add profile support and revise HTTP retry semantics\n * 2025-08-18: imuxsock: tidy parameter docs and links\n * 2025-08-18: imuxsock: split input parameter docs into reference pages\n * 2025-08-18: imptcp: split parameter docs into reference pages\n * 2025-08-18: docs: streamline contrib templates and commit guidance\n * 2025-08-18: docs: split imfile module parameters (#5941)\n * 2025-08-18: doc/imfile: add File and Tag to parameter samples\n * 2025-08-18: OMHIREDIS: supported UDS redis server address\n * 2025-08-17: ommongodb: fix compilation of SSL/TLS support\n * 2025-08-17: ommongodb: add support for mongo-c-driver v2\n * 2025-08-17: docs: rewrite container section with current images\n * 2025-08-17: doc: add per-container docker pages with env defaults (#5960)\n * 2025-08-16: imjournal: fix double sd_journal_close() during thread cancellation\n * 2025-08-16: doc: warn against unofficial and outdated doc clones\n * 2025-08-16: doc: set html_baseurl to emit canonical tags\n * 2025-08-16: Update doc/source/conf.py\n * 2025-08-15: omhttp: migrate to OMODTX; prep for project-supported status\n * 2025-08-15: imtcp: split input parameter docs into reference pages\n * 2025-08-15: imtcp: fix parameter scopes and add input examples\n * 2025-08-15: doc: omkafka SASL-from-env example + backticks doc overhaul\n * 2025-08-15: Update tests/omprog-feedback.sh\n * 2025-08-15: Fix transaction suspension handling for issue #2420\n * 2025-08-14: ommysql: remove long-standing non-needed TODO item\n * 2025-08-14: imfile: add per-file impstats counters and tests\n * 2025-08-14: doc: split imudp parameter docs\n * 2025-08-13: ommysql: drop global rwlock_hmysql, revert a3b2983\n * 2025-08-13: docs: split pmrfc3164 parameters into structured reference pages\n * 2025-08-13: docs: split omelasticsearch parameters into dedicated reference pages\n * 2025-08-13: docs: split imjournal parameter docs into dedicated reference pages\n * 2025-08-13: doc: increase visibility of reverse DNS cache controls\n * 2025-08-13: doc: clarify reverse DNS cache scope\n * 2025-08-13: doc: add v8 locking note\n * 2025-08-13: chore: document AI-generated changes\n * 2025-08-12: doc: update to doc (improvement) strategy\n * 2025-08-12: doc: reference AI module map in AGENTS.md and DEVELOPING.md\n * 2025-08-12: doc: refactor imdocker module param docs into structured ref pages\n * 2025-08-12: doc: imdocker had invalid legacy config stmt info - removed\n * 2025-08-11: omazureeventhubs: add Doxygen docs for proton thread and flow (NFC)\n * 2025-08-11: omamqp1: resize buffer via realloc with error handling\n * 2025-08-11: docs: add developer page \"Action Threads and Queue Engine\"\n * 2025-08-04: omazurevenethubs: fix compiler warning\n * 2025-08-01: omysql: better doc to clarify mutex use\n * 2025-08-01: core: migrate callback invocations to type-safe signatures\n * 2025-08-01: Fix: Remove unsafe function pointer casting in cfsysline.c\n * 2025-07-31: doc fix: remove doc for debug options that no longer exits\n * 2025-07-31: core: improve inline code doc for action.[ch]\n * 2025-07-30: parser: add checkParserInst hook for pre-registration validation\n * 2025-07-30: doc: improve \"AI First\" coverage in about section\n * 2025-07-28: ossl: Add PrioritizeSAN option to OpenSSL network stream driver\n * 2025-07-28: imjournal: fix vulnerability in state file creation\n * 2025-07-28: gtls: log missing certificate/key only once\n * 2025-07-27: doc: Improve omfwd module documentation\n * 2025-07-27: doc(omfwd): split and restructure omfwd documentation\n * 2025-07-25: document [io]mczmq modules\n * 2025-07-25: doc: add an initial \"about\" section\n * 2025-07-25: Add Doxygen comments for czmq modules (#5865)\n * 2025-07-24: Add sphinxcontrib-mermaid to documentation Docker image\n * 2025-07-22: docs: add structured beginner guide under getting_started/\n * 2025-07-22: doc: introduce mermaid diagrams and modernized configuration docs\n * 2025-07-21: doc: major restructure and content improvements\n * 2025-07-21: doc: fix legacy conf where modern should be\n * 2025-07-21: Add furo theme for sphinx\n * 2025-07-20: doc: add json targets\n * 2025-07-20: doc: Modernize documentation and tooling\n * 2025-07-20: Add documentation build workflow\n * 2025-07-20: Add doc build workflow for PRs\n * 2025-07-20: Add Apache License to documentation\n * 2025-07-19: doc: some cleanup and naming changes\n * 2025-07-19: doc: omit footer in singlehtml builds by default\n * 2025-07-18: rainerscript: backticks support ${VAR} and adjacent text\n * 2025-07-18: pmrfc3164: add headerless message detection and handling\n * 2025-07-18: doc: restore control flow notes\n * 2025-07-18: doc: clarify action flow and add test requirement\n * 2025-07-18: Correct connection timing computation\n * 2025-07-17: fix: readthedocs definitions\n * 2025-07-17: doc: provide strategy and implementation document\n * 2025-07-17: doc: fix \"edit on github\" repo link\n * 2025-07-17: doc: enable readthedocs.io support\n * 2025-07-16: style: reformat Config Settings block with Doxygen comments\n * 2025-07-16: style: normalize C source formatting via clang-format (PoC)\n * 2025-07-16: omelasticsearch fix: Handle HTTP 401/403 auth errors\n * 2025-07-16: fix mmaitag provider handling and memory safety\n * 2025-07-16: cleanup: remove code-style tools that are no longer neeed\n * 2025-07-16: cleanup: fix reference to \"master\" branch -\u003e now \"main\"\n * 2025-07-16: chore: add project-wide formatting and editor configs\n * 2025-07-16: Fix race condition in imtcp when closing sessions\n * 2025-07-16: Add IP address SAN support\n * 2025-07-15: fix: Prevent redefinition warnings for syslog macros\n * 2025-07-15: feat: introduce mmaitag PoC with Gemini AI provider (#5754)\n * 2025-07-15: doc: add FAQ with commonly misunderstood config sequences\n * 2025-07-15: build: mmaitag in configure disabled by default (#5797)\n * 2025-07-15: build: adjust version tag used for daily stable build process\n * 2025-07-15: Investigate and resolve rsyslog issue 2693 (#5793)\n * 2025-07-14: refactor: modernize macro definitions to support formatting and clarity\n * 2025-07-14: docs: Fix minor typos\n * 2025-07-13: impstats: add support for Prometheus metrics output format\n * 2025-07-12: docker: reflect new state of repo\n * 2025-07-12: doc: document gtls intermediate cert chain\n * 2025-07-12: doc: clarify purpose of MsgSetRawMsg side effects\n * 2025-07-12: dev doc: add design notes to queue subsystem files\n * 2025-07-12: Improve TLS handshake error logging (#5762)\n * 2025-07-12: Document statsobj architecture and formats\n * 2025-07-11: tooling: new developer tool to fix trailing spaces\n * 2025-07-11: Fix unsafe sprintf use in Azure event hubs module (#5687)\n * 2025-07-10: update README.md - add new AI \"rsyslog Assistant\" link\n * 2025-07-08: Document native message modification plugin interface (#5757)\n * 2025-07-08: AI tools: Add directory for future AI/ML tooling (#5758)\n * 2025-07-06: scripting: add endswith operator to property filters and RainerScript\n * 2025-07-06: nsd_ptcp fix: misleading error messages (regression from ad1fd21)\n * 2025-07-06: imtcp: prevent double-enqueue of descriptors via inQueue flag\n * 2025-07-06: imkmsg fix: Handle EAGAIN/EWOULDBLOCK check portably\n * 2025-07-05: helper utils: clean up python indentation\n * 2025-07-04: imfile: add new module/input parameter deleteStateOnFileMove\n * 2025-06-20: imfile: some cleanup, no functional changes\n * 2025-06-20: fix off-by-one buffer overflow\n * 2025-06-19: tcpsrv cleanup: remove TODO line that was scheduled to be removed\n * 2025-06-18: tcpsrv: fail to remove already-removed epoll fd is no error\n * 2025-06-18: official containers: bump rsyslog release nbr for next cycle\n * 2025-06-17: omsendertrack fix: memory leak in initHashTable\n * 2025-06-17: net_ossl: Fix memleak in net_ossl_peerfingerprint\n * 2025-06-17: doc: first omsendertrack reference manual entry\n * 2025-06-17: Bump tj-actions/changed-files from 4 to 46 in /.github/workflows\n * 2025-06-17: Add omsendertrack statefile tests (#5716)\n * 2025-06-15: update developer doc to point to new rsyslog-doc location\n * 2025-06-15: docs: document proof-of-concept status\n * 2025-06-15: doc: fix some nits, especially in the faq section\n * 2025-06-15: doc: add lexer for rsyslog config language\n * 2025-06-15: cleanup: fix some TODOs and remove outdated ones\n * 2025-06-15: Fix: Correct documentation location and update build guidance\n * 2025-06-14: doc: improve description of config parameter block handling\n * 2025-06-14: doc: add doxygen comments to runtime header\n * 2025-06-13: omfile: update internal doc to doxyfile format and improve it\n * 2025-06-13: docs: add commenting style guide and reference\n * 2025-06-13: add new FAQ on udp reception troubleshooting\n * 2025-06-13: Use RGerhards name in omusrmsg header\n * 2025-06-12: ossl netstream driver: do not import engines if not available (#5685)\n * 2025-06-12: Removed the redundant *_la_LDFLAGS\n * 2025-06-11: Add Makefile for Sphinx documentation\n * 2025-06-10: prepare scheduled stable version 8.2506.0\n * 2025-06-10: omusrmsg: use utmpx on systems where available\n * 2025-06-10: imtcp: avoid data race in notifyReArm\n * 2025-06-10: fix hashtable realloc memset range\n * 2025-06-09: Revert \"queue: emit better warning messages on queue param mismatch\"\n * 2025-06-08: omfwd regression fix: avoid false active target change log message\n * 2025-06-08: lookup: add new table type for regex-matches\n * 2025-06-08: imdocker: harden module buffer management\n * 2025-06-08: clarify pselect suppression\n * 2025-06-07: doc: document optional module dependencies\n * 2025-06-07: Add optional PCRE match module\n * 2025-06-06: fix stringop-overread warning in omusrmsg\n * 2025-06-06: fix im3195 doc\n * 2025-06-06: docs: unify AI commit instructions and improve setup notes\n * 2025-06-06: docs: restructure contributor docs for clarity and AI agent readiness\n * 2025-06-05: update README to convey new developments in this project\n * 2025-06-05: fix mime type typo\n * 2025-06-05: docs: clarify CI image size\n * 2025-06-05: Update README to mirror new project organization\n * 2025-06-05: STEP: interim new \"production\" docker container set\n * 2025-06-05: Add README files for standard, dockerlogs, and host\n * 2025-06-04: stats: add prometheus format to set of supported output formats\n * 2025-06-04: imhttp: add simple http health check functionality\n * 2025-06-04: hostname setting works\n * 2025-06-04: Fix comment for parsSkipWhitespace\n * 2025-05-23: imudp: Output errno after recvmmsg call\n * 2025-05-15: imjournal: delete redundant lines in imklog.c\n * 2025-05-12: netstrm: optimized interface for passing connection err info\n * 2025-05-08: tls subsystem: generate better error message on accept failure\n * 2025-04-24: tcpsrv: ensure thread name set via pthread is max 15 char\n * 2025-04-24: ossl tls driver: better error reporting\n * 2025-04-18: gnutls netstrm drvr fix: handle write retry correctly in recv call\n * 2025-04-17: tcpsrv bugfix: do not busy wait on io events\n * 2025-04-16: tcpsrv bugfix: input name was not properly propagated\n * 2025-04-16: add experimental stats for worker awaking via event notification\n * 2025-04-15: tcpsrv: fix non-maintained stats counter \"run\"\n * 2025-03-25: Feature: #define macro creation for journald namespace function.\n * 2025-03-22: omjournal: Fix priority value.\n * 2025-03-22: Feature: Add journald namespace feature to omjournal.\n * 2025-03-17: imuxsock: Add statistics counter for discarded messages\n * 2025-03-14: cosmetic: remove clang static analyzer false positive\n * 2025-03-06: omsendertrack: new module\n * 2025-03-06: Fix a buffer overflow when the argument to replace is empty\n * 2025-03-05: rsyslog startup bugfix: cosmetic memory leak\n * 2025-03-05: gnutls TLS driver: fix small memory leak\n * 2025-03-05: core: fix potential misadressing in sigmask\n * 2025-03-03: Update man page dates\n * 2025-03-01: omhttp: fix handling of httpProxy variable\n * 2025-02-28: \"fix\" clang 18 static analyzer false positives\n * 2025-02-27: queue: emit better warning messages on queue param mismatch\n * 2025-02-26: core: fix potential NULL ptr access on HUP in very early startup phase\n * 2025-02-21: bump version number for next scheduled stable cycle\n * 2025-02-20: Fix typo in debug printf of ommysql\n","modified":"2026-10-31T18:00:09.594047674Z","published":"2026-10-29T14:56:47Z","related":["CVE-2026-19654","CVE-2026-61548","CVE-2026-78002","CVE-2026-92709"],"upstream":["CVE-2026-19654","CVE-2026-61548","CVE-2026-78002","CVE-2026-92709"],"references":[{"type":"ADVISORY"},{"type":"REPORT","url":"https://bugzilla.suse.com/1257604"},{"type":"REPORT","url":"https://bugzilla.suse.com/1271910"},{"type":"REPORT","url":"https://bugzilla.suse.com/1272414"},{"type":"REPORT","url":"https://bugzilla.suse.com/1274610"},{"type":"REPORT","url":"https://bugzilla.suse.com/1275926"},{"type":"REPORT","url":"https://bugzilla.suse.com/1281628"},{"type":"REPORT","url":"https://bugzilla.suse.com/1285036"},{"type":"REPORT","url":"https://bugzilla.suse.com/1286162"},{"type":"REPORT","url":"https://bugzilla.suse.com/1286926"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-19654"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-61548"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-78002"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2026-92709"}],"affected":[{"package":{"name":"rsyslog","ecosystem":"openSUSE:Leap 16.0","purl":"pkg:rpm/opensuse/rsyslog&distro=openSUSE%20Leap%2016.0"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2608.0-160000.1.1"}]}],"ecosystem_specific":{"binaries":[{"rsyslog-module-pgsql":"8.2608.0-160000.1.1","rsyslog-doc":"8.2608.0-160000.1.1","rsyslog-module-relp":"8.2608.0-160000.1.1","rsyslog-diag-tools":"8.2608.0-160000.1.1","rsyslog-module-dtls":"8.2608.0-160000.1.1","rsyslog-module-omtcl":"8.2608.0-160000.1.1","rsyslog":"8.2608.0-160000.1.1","rsyslog-module-gcrypt":"8.2608.0-160000.1.1","rsyslog-module-gssapi":"8.2608.0-160000.1.1","rsyslog-module-mysql":"8.2608.0-160000.1.1","rsyslog-module-mmnormalize":"8.2608.0-160000.1.1","rsyslog-module-gtls":"8.2608.0-160000.1.1","rsyslog-module-elasticsearch":"8.2608.0-160000.1.1","rsyslog-module-ossl":"8.2608.0-160000.1.1","rsyslog-module-omhttpfs":"8.2608.0-160000.1.1","rsyslog-devel":"8.2608.0-160000.1.1"}]},"database_specific":{"source":"https://ftp.suse.com/pub/projects/security/osv/openSUSE-SU-2026:22184-1.json"}}],"schema_version":"1.9.2"}