rsyslog-5.8.10-2.AXS4

Rsyslog is an enhanced, multi-threaded syslog daemon. It supports MySQL, syslog/TCP, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is compatible with stock sysklogd and can be used as a drop-in replacement. Rsyslog is simple to set up, with advanced features suitable for enterprise-class, encryption-protected syslog relay chains.

Security issues fixed with this release:

CVE-2011-4623
No description available at the time of writing, please use the CVE link below.

Bug fixes:

• With Transport Layer Security (TLS) transport and keys in PKCS#8 format, some variables were not deinitialized correctly because rsyslogd crashed with a segmentation fault. This has been fixed.

• When set up to provide a GSSAPI listener, rsyslogd crashed with a segmentation fault and the imgssapi plug-in initialization was not complete. This has been fixed.

• Fixed alias handling to not necessarily use the FQDN as the alias for the localhost hostname of on multihomed hosts.

• The gtls module is not unloaded anymore during the process lifetime; this fixes the system reaching the limit for file descriptors.

• rsyslog can now override the hostname to set an alternative hostname for locally generated messages.

• rsyslogd init script now passes the lock file path to the 'status' action: the lock file is not ignored anymore, and the correct exit code is returned.

• Malformed spool files could incorrectly deinitialize data, in turn making rsyslogd crash with a segmentation fault. This has been fixed.

• rsyslog now gracefully handles the errors responsible for deinitialization of non-existent data when rsyslog is set up to use a disk assisted queue when specifying a spool file.

• Fixed the descritpion of the "-d" option in the man page.

• Debug messages are no longer written to standard output when run in the background.

• DNs with more than 128 characters were not displayed. This update enlarges the string buffer to process long DNs.

Enhancements:

• rsyslogd can now limit the number of messages it accepts through a UNIX socket.

• Added the "/etc/rsyslog.d/" configuration directory to supply syslog configuration files.

• Note: After installing this update, the rsyslog daemon will be restarted automatically.