Hello community, here is the log from the commit of package rsyslog for openSUSE:Factory checked in at 2018-07-02 23:28:04 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/rsyslog (Old) and /work/SRC/openSUSE:Factory/.rsyslog.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "rsyslog" Mon Jul 2 23:28:04 2018 rev:138 rq:619439 version:8.36.0 Changes: -------- --- /work/SRC/openSUSE:Factory/rsyslog/rsyslog.changes 2018-03-26 12:10:53.098008103 +0200 +++ /work/SRC/openSUSE:Factory/.rsyslog.new/rsyslog.changes 2018-07-02 23:28:13.189637953 +0200 @@ -1,0 +2,20 @@ +Wed Jun 27 18:54:51 UTC 2018 - [email protected] + +- rsyslog 8.36.0: + * Liblogging-stdlog deprecated + * OpenSSL based TLS driver added in addition to GnuTLS + * GnuTLS TLS driver: support intermediate certificates + * imptcp: add ability to configure socket backlog + * fmhash: new hash function module + * updates and fixes to various modules + * omfwd: add support for bind-to-address for UDP + * mmkubernetes: new module +- updates and fixes to various modules + +------------------------------------------------------------------- +Tue Jun 26 07:43:50 UTC 2018 - [email protected] + +- fix CVE-2015-3243 rsyslog: some log files are created world-readable + (bsc#935393) + +------------------------------------------------------------------- Old: ---- rsyslog-8.33.1.tar.gz rsyslog-doc-8.33.1.tar.gz New: ---- rsyslog-8.36.0.tar.gz rsyslog-doc-8.36.0.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ rsyslog.spec ++++++ --- /var/tmp/diff_new_pack.filWf4/_old 2018-07-02 23:28:14.169636746 +0200 +++ /var/tmp/diff_new_pack.filWf4/_new 2018-07-02 23:28:14.173636741 +0200 @@ -25,7 +25,7 @@ Summary: The enhanced syslogd for Linux and Unix License: (GPL-3.0-or-later AND Apache-2.0) Group: System/Daemons -Version: 8.33.1 +Version: 8.36.0 Release: 0 %if 0%{?suse_version} >= 1210 %bcond_without systemd @@ -50,6 +50,7 @@ %endif %bcond_without gssapi %bcond_without gnutls +%bcond_without openssl %bcond_without gcrypt %bcond_without mysql %bcond_without pgsql @@ -114,7 +115,6 @@ BuildRequires: bison BuildRequires: curl-devel BuildRequires: flex -BuildRequires: openssl-devel >= 0.9.7 BuildRequires: pcre-devel BuildRequires: pkgconfig BuildRequires: zlib-devel @@ -155,6 +155,9 @@ %if %{with gnutls} BuildRequires: libgnutls-devel %endif +%if %{with openssl} +BuildRequires: pkgconfig(openssl) +%endif %if %{with gcrypt} BuildRequires: libgcrypt-devel %endif @@ -364,8 +367,23 @@ Rsyslog is an enhanced multi-threaded syslog daemon. See rsyslog package. -This module provides the ability for TLS encrypted TCP logging (based -on current syslog-transport-tls internet drafts). +This module provides the ability for TLS encrypted TCP logging using +the GnuTLS library. +%endif + +%if %{with openssl} + +%package module-ossl +Requires: %{name} = %{version} +Summary: TLS encryption support module for rsyslog +Group: System/Daemons + +%description module-ossl +Rsyslog is an enhanced multi-threaded syslog daemon. See rsyslog +package. + +This module provides the ability for TLS encrypted TCP logging using +the OpenSSL library. %endif %if %{with gcrypt} @@ -575,6 +593,7 @@ --enable-inet \ --enable-unlimited-select \ --enable-rsyslogd \ + --enable-liblogging-stdlog \ %if %{with elasticsearch} --enable-elasticsearch \ %endif @@ -584,6 +603,9 @@ %if %{with gnutls} --enable-gnutls \ %endif +%if %{with openssl} + --enable-openssl \ +%endif %if %{with gssapi} --enable-gssapi-krb5 \ %endif @@ -654,6 +676,7 @@ %endif --enable-mmanon \ --enable-mmaudit \ + --enable-mmkubernetes \ --enable-mmjsonparse \ --enable-mmutf8fix \ --enable-mmcount \ @@ -693,6 +716,9 @@ %if %{with gnutls} lmnsd_gtls.so \ %endif +%if %{with openssl} + lmnsd_ossl.so \ +%endif %if %{with gcrypt} lmcry_gcry.so \ %endif @@ -942,6 +968,8 @@ /sbin/rsyslogd %endif %dir %{rsyslog_module_dir_nodeps} +%{rsyslog_module_dir_nodeps}/fmhash.so +%{rsyslog_module_dir_nodeps}/fmhttp.so %{rsyslog_module_dir_nodeps}/imfile.so %{rsyslog_module_dir_nodeps}/imklog.so %{rsyslog_module_dir_nodeps}/imkmsg.so @@ -963,6 +991,7 @@ %{rsyslog_module_dir_nodeps}/mmcount.so %{rsyslog_module_dir_nodeps}/mmexternal.so %{rsyslog_module_dir_nodeps}/mmfields.so +%{rsyslog_module_dir_nodeps}/mmkubernetes.so %{rsyslog_module_dir_nodeps}/mmpstrucdata.so %{rsyslog_module_dir_nodeps}/mmrfc5424addhmac.so %{rsyslog_module_dir_nodeps}/mmsequence.so @@ -1073,6 +1102,13 @@ %{rsyslog_module_dir_withdeps}/lmnsd_gtls.so %endif +%if %{with openssl} + +%files module-ossl +%defattr(-,root,root) +%{rsyslog_module_dir_withdeps}/lmnsd_ossl.so +%endif + %if %{with relp} %files module-relp ++++++ rsyslog-8.33.1.tar.gz -> rsyslog-8.36.0.tar.gz ++++++ ++++ 44523 lines of diff (skipped) ++++++ rsyslog-doc-8.33.1.tar.gz -> rsyslog-doc-8.36.0.tar.gz ++++++ /work/SRC/openSUSE:Factory/rsyslog/rsyslog-doc-8.33.1.tar.gz /work/SRC/openSUSE:Factory/.rsyslog.new/rsyslog-doc-8.36.0.tar.gz differ: char 5, line 1 ++++++ rsyslog-unit.patch ++++++ --- /var/tmp/diff_new_pack.filWf4/_old 2018-07-02 23:28:14.737636047 +0200 +++ /var/tmp/diff_new_pack.filWf4/_new 2018-07-02 23:28:14.741636042 +0200 @@ -1,7 +1,5 @@ -Index: rsyslog-8.33.1/rsyslog.service.in -=================================================================== ---- rsyslog-8.33.1.orig/rsyslog.service.in -+++ rsyslog-8.33.1/rsyslog.service.in +--- rsyslog-8.36.0.orig/rsyslog.service.in 2018-06-25 17:20:38.000000000 +0200 ++++ rsyslog-8.36.0/rsyslog.service.in 2018-06-26 21:03:46.788972908 +0200 @@ -1,14 +1,21 @@ [Unit] Description=System Logging Service @@ -24,5 +22,5 @@ -Restart=on-failure +Restart=on-abort - [Install] - WantedBy=multi-user.target + # Increase the default a bit in order to allow many simultaneous + # files to be monitored, we might need a lot of fds. ++++++ rsyslog.conf.in ++++++ --- /var/tmp/diff_new_pack.filWf4/_old 2018-07-02 23:28:14.773636002 +0200 +++ /var/tmp/diff_new_pack.filWf4/_new 2018-07-02 23:28:14.773636002 +0200 @@ -61,6 +61,14 @@ # $IncludeConfig ETC_RSYSLOG_D_GLOB +# +# Set the default permissions for all log files. +# +$FileOwner root +$FileGroup root +$FileCreateMode 0640 +$DirCreateMode 0750 +$Umask 0022 ### # print most important on tty10 and on the xconsole pipe
