Backport 07b3c40a5a
A regex match at the beginning of the receive buffer can form a
negative message length after oversize-frame recovery. Mirror the
line-offset guard used by the shared imtcp parser so that only a
match following an existing line can submit a frame.
Security advisory: GHSA-cj5r-wh2m-7w29
Resolves: RHEL-212706
Signed-off-by: Cropi <alakatos@redhat.com>
Backport the LogMsg() call added in upstream PR #7366 so that rsyslog
logs a warning when sd_journal_get_data() fails to retrieve the MESSAGE
field from a journal entry, instead of silently submitting an empty
message. The log entry includes the errno string to aid troubleshooting.
Backport https://github.com/rsyslog/rsyslog/pull/7366
Resolves: RHEL-194529
Signed-off-by: Cropi <alakatos@redhat.com>
Backport tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups and
the detection-phase TLS option application from upstream PR #7278
(merged 2026-07-05) to the CentOS 9 Stream branch.
Both streams use the same rsyslog 8.2604.0 tarball so the patches
apply without modification.
Resolves: RHEL-193506
Signed-off-by: Cropi <alakatos@redhat.com>
Drop ossl-free-cert.patch and gtls-unused-certificates.patch (upstream).
Backport imfile inotify FD release fix from upstream PR #6753.
Move logrotate configuration back to the main package
Resolves: RHEL-140914
Resolves: RHEL-169492
Resolves: RHEL-169794
Resolves: RHEL-171897
Resolves: RHEL-173192
Rebase to 8.2510.0
gnutls netstream driver: improve doc
Resolves: RHEL-86031
rsyslog.conf: use RainerSscript syntax in actions
Resolves: RHEL-42508
gnutls netstream driver: report missing certificate just once
Resolves: RHEL-105782
imuxsock: track dropped messages by ratelimiting
Resolves: RHEL-66274
man page version update
Resolves: RHEL-78220
omfwd: do not hang forever in case of broken TLS handshake
Resolves: RHEL-67639
Resolves: RHEL-65177
Fix segfault when $ControlCharacterEscapePrefix is set
Resolves: RHEL-38222
Resolves: RHEL-70099
Fix segfault due to processing malform queue message
Resolves: RHEL-70100
Fix $ActionQueueDiscardMark default value to 80% queue size
Resolves: RHEL-70109
Fix crash on startup when an invalid function is specified
Resolves: RHEL-70111
Resolves: RHEL-5196
Allow setting certificates for separate connections
Resolves: RHEL-937
Capability dropping feature can be turned off
Resolves: RHEL-943
imjournal: new module parameter filecreatemode
Resolves: RHEL-949
resolves: rhbz#2157805
imjournal: by default retrieves _PID from journal as PID number
resolves: rhbz#2176397
Systemd service file hardening
resolves: rhbz#2176403
rsyslog.conf: load imuxsock and imjournal before loading rsyslog.d
resolves: rhbz#2165899
rsyslog is now started after the network service during boot
resolves: rhbz#2074318
imjournal: add second fallback to the message identifier
resolves: rhbv#2129015
resolves: rhbz#2069664
Add inotify_rm_watch() inotify API call when object needs to be destroyed
resolves: rhbz#2070528
Fix error handling in gtlsRecordRecv, which can cause full CPU usage
resolves: rhbz#1972058
Close dir when fsync=on
resolves: rhbz#1972069
Do not exit when user/group can not be found
resolves: rhbz#1990868
Remove abortOnIDResolution fail
Always use message severity when comparing with ratelimit severity
resolves: rhbz#1990869
