ubuntu/+source/rsyslog:ubuntu/trusty-security

Last commit made on 2014-10-09
Get this branch:
git clone -b ubuntu/trusty-security https://git.launchpad.net/ubuntu/+source/rsyslog
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
ubuntu/trusty-security
Repository:
lp:ubuntu/+source/rsyslog

Recent commits

0c78ef6... by Marc Deslauriers on 2014-10-02

Import patches-unapplied version 7.4.4-1ubuntu2.3 to ubuntu/trusty-security

Imported using git-ubuntu import.

Changelog parent: 7458e71f2ea4b30d1cd9eb09ae2079f7709c283a

New changelog entries:
  * SECURITY UPDATE: denial of service and possible code execution via
    invalid PRI value
    - debian/patches/CVE-2014-3634.patch: limit PRI values in
      grammar/rainerscript.h, plugins/imfile/imfile.c,
      plugins/imklog/imklog.c, plugins/imkmsg/imkmsg.c,
      plugins/imsolaris/imsolaris.c, plugins/imuxsock/imuxsock.c,
      runtime/msg.c, runtime/parser.c, runtime/rsyslog.h,
      runtime/srutils.c, runtime/syslogd-types.h, runtime/typedefs.h,
      tools/syslogd.c.
    - CVE-2014-3634
    - CVE-2014-3683

7458e71... by Chris J Arges on 2014-08-19

Import patches-unapplied version 7.4.4-1ubuntu2.1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 5f544c360b757565883c230d53092a30191b515a

New changelog entries:
  * Enable non-kernel facility klog messages. (LP: #1274444)

5f544c3... by Colin Watson on 2013-12-04

Import patches-unapplied version 7.4.4-1ubuntu2 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: e0184ccaf3b51fde6e97157782704d4457634b5f

New changelog entries:
  * debian/rsyslog.postinst: Make sure /var/log is owned by group syslog and
    is group-writeable (LP: #1256695).
  * Ensure that rsyslogd can create files in group adm, even when dropping
    group privileges to syslog (LP: #484336):
    - debian/patches/10-initgroups.patch: Try to set appropriate
      supplementary groups before dropping UID.
    - debian/rsyslog.postinst: Add syslog user to group adm.

e0184cc... by Steve Langasek on 2013-10-21

Import patches-unapplied version 7.4.4-1ubuntu1 to ubuntu/trusty-proposed

Imported using git-ubuntu import.

Changelog parent: 99f777f9320da1315726cf9d080884548d2266cc

New changelog entries:
  * Merge from Debian unstable, remaining changes:
    - Run as rsyslog:rsyslog, set $FileOwner to syslog
    - Replace init script with debian/rsyslog.upstart.
    - debian/rsyslog.logrotate: Use reload command to restart rsyslog
    - debian/rsyslog.conf: enable $RepeatedMsgReduction
      to avoid bloating the syslog file.
    - Add debian/rsyslog.dmesg.upstart to save initial dmesg into a file.
      Install it in debian/rules.
    - debian/50-default.conf: set of default rules for syslog (forwarded to
      Debian #603160). remove file in postrm on purge. manage with ucf.
    - Add disabled by default AppArmor profile:
      + debian/rsyslog.upstart: add pre-start stanza to load profile
      + add debian/usr.sbin.rsyslogd profile
      + debian/rules: use dh_apparmor to install profile before rsyslog is
        restarted
      + debian/control: suggests apparmor (>= 2.3)
      + debian/rsyslog.install: install profile to /etc/apparmor.d
      + debian/rsyslog.dirs: install /etc/apparmor.d/force-complain,
        and /etc/apparmor.d/disable
      + debian/rsyslog.preinst: disable profile on clean install or upgrades
        from earlier than when we shipped the profile
      + debian/control: Build-Depends on dh-apparmor
    - debian/rsyslog.postrm: fixed typo "dissappear" to "disappear".
    - debian/rsyslog.postinst: fix ownership of /var/spool/rsyslog.
    - Adjust rsyslog init script to detect upstart, making the upstart
      patches upstreamable to Debian.
    - Add versioned dependency on lsb-base for the use of init_is_upstart.
  * Dropped changes:
    - debian/patches/04-fix_startup_deadlock.patch: superseded upstream.
    - debian/patches/201-PreserveFQDN-not-working: originally from upstream.
    - debian/patches/202-off-by-one-regression-1187808.patch: originally
      from upstream.
  * debian/rules: filter out -Wl,-Bsymbolic-functions only, instead of
    overriding all LDFLAGS.
  * Drop rsyslog-mongodb package, depends on libmongo-client which is not
    in main.
  * Drop mmnormalize module, which depends on liblognorm from universe.
  * Build with --disable-silent-rules to get useful build logs.

99f777f... by Michael Biebl on 2013-09-03

Import patches-unapplied version 7.4.4-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 703c5b772b4d6bc8cfabe7280d740fa99f145022

New changelog entries:
  * New upstream release.

703c5b7... by Michael Biebl on 2013-07-22

Import patches-unapplied version 7.4.3-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 18339733e5b96aa07591e3ed9c55fb5a4c6adacf

New changelog entries:
  * New upstream release.

1833973... by Michael Biebl on 2013-07-05

Import patches-unapplied version 7.4.2-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 35580b5c20d5de9c838179a48fec78af9c31b779

New changelog entries:
  * New upstream release.

35580b5... by Michael Biebl on 2013-06-27

Import patches-unapplied version 7.4.1-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: b24ecc72704a8cdcf556497d1cca4cdb2e0ff759

New changelog entries:
  * Bump Build-Depends on dh-systemd to (>= 1.4) to ensure we have a recent
    enough version of init-system-helpers which properly deals with a missing
    state directory. (Closes: #714265)

b24ecc7... by Michael Biebl on 2013-06-26

Import patches-unapplied version 7.4.1-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 262ff7950ec8158b03caeeb459a919e1903a6a84

New changelog entries:
  * Use dh-systemd to setup the systemd service properly.

262ff79... by Michael Biebl on 2013-06-17

Import patches-unapplied version 7.4.1-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: cdb07e5260c05971716f8c16dc2d6b1d4e63e1e8

New changelog entries:
  * New upstream release.