lp:ubuntu/precise-security/rsyslog

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

47. By Marc Deslauriers on 2014-10-02

* SECURITY UPDATE: denial of service and possible code execution via
  invalid PRI value
  - debian/patches/CVE-2014-3634.patch: limit PRI values in ChangeLog,
    configure.ac, configure, plugins/imfile/imfile.c,
    plugins/imklog/imklog.c, plugins/imklog/ksym.c,
    plugins/imsolaris/imsolaris.c, plugins/imtemplate/imtemplate.c,
    plugins/imuxsock/imuxsock.c, runtime/msg.c, runtime/nsd_gtls.c,
    runtime/parser.c, runtime/rsyslog.h, runtime/rule.c,
    runtime/srutils.c, runtime/syslogd-types.h, tools/syslogd.c.
  - CVE-2014-3634
  - CVE-2014-3683

46. By Andres Rodriguez on 2012-03-30

debian/rsyslog.postrm: fixed typo "dissappear" to "disappear" (LP: #846818)

45. By Jamie Strandboge on 2012-03-07

* debian/rsyslog.conf: set $WorkDirectory to /var/spool/rsyslog, which is
  the example location in documentation. When not configured it defaults to
  '/', which is undesirable. (LP: #918947, Closes: #656535)
* debian/rsyslog.dirs: add /var/spool/rsyslog/
* debian/usr.sbin.rsyslogd:
  - adjust for $WorkDirectory
  - allow 'r' on /var/log/** too (for imfile)

44. By Jamie Strandboge on 2012-03-06

debian/control: Build-Depends on dh-apparmor (LP: #948120)

43. By Jamie Strandboge on 2012-01-11

* Add disabled by default AppArmor profile (LP: #914820)
  - debian/rsyslog.upstart: add pre-start stanza to load profile
  - add debian/usr.sbin.rsyslogd profile
  - debian/rules: use dh_apparmor to install profile before rsyslog is
    restarted
  - debian/control: suggests apparmor (>= 2.3)
  - debian/rsyslog.install: install profile to /etc/apparmor.d
  - debian/rsyslog.dirs: install /etc/apparmor.d/force-complain,
    and /etc/apparmor.d/disable
  - debian/rsyslog.preinst: disable profile on clean install or upgrades
    from earlier than when we shipped the profile

42. By Scott Moser on 2011-12-20

debian/patches/100-imuxsock-allow-missing-date.patch
fix bug in imuxsock that truncated messages if they did not
contain a date field (LP: #905419).

41. By Adam Conrad on 2011-12-02

No-change rebuild to drop spurious libsfgcc1 dependency on armhf.

40. By Clint Byrum on 2011-11-24

Rebuild for libmysqlclient transition

39. By Scott Moser on 2011-11-07

* Resynchronise with Debian. Remaining changes:
  - Run as rsyslog:rsyslog, set $FileOwner to syslog
  - Replace init script with debian/rsyslog.upstart.
  - debian/rsyslog.logrotate: Use reload command to restart rsyslog
  - debian/rsyslog.conf: enable $RepeatedMsgReduction
    to avoid bloating the syslog file (LP #453444)
  - Add debian/rsyslog.dmesg.upstart to save initial dmesg into a file.
    Install it in debian/rules.
  - debian/50-default.conf: set of default rules for syslog (forwarded to
    Debian #603160). remove file in postrm on purge. manage with ucf.
  - debian/rules: build with LDFLAGS=""
* Dropped:
  - debian/patches/02-CVE-2011-3200.patch (fixed in upstream release)

38. By Jamie Strandboge on 2011-10-03

* debian/patches/02-CVE-2011-3200.patch: fix denial of service via off by
  two
  - CVE-2011-3200