SUSE-SU-2026:24598-1

Dashboard / Vulnerabilities / SUSE-SU-2026:24598-1

SUSE-SU-2026:24598-1

Summary: Security update for rsyslog

Details: This update for rsyslog fixes the following issues: - CVE-2026-19654: imptcp regex-framing remote denial of service (bsc#1271910). - CVE-2026-61548: crafted RFC 5424 messages to mmpstrucdata can lead to a stack overwrite (bsc#1272414). - CVE-2026-78002: RainerScript replace() heap buffer overflow (bsc#1275926). - CVE-2026-92709: `omfile` `dynaFile` template uses a value influenced by untrusted input as a path component without explicit secure-path handling, which can lead to arbitrary code execution (bsc#1286926). - RainerScript replace() length wrap (bsc#1285036). Changes for rsyslog: - added new rsyslog (imdtls/omdtls) DTLS modules (jsc#PED-16623) - upgrade to rsyslog 8.2608.0 (bsc#1257604) * 2026-08-18: imbeats: rearm listener after failed TLS accept * 2026-08-18: msg: serialize turbo snapshot duplication * 2026-08-18: omfile: harden dynafile default containment * 2026-08-18: fixup! omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-02: omfwd: support PKCS#11 URIs with ossl TLS * 2026-07-21: mmkubernetes: reload SA token proactively and on HTTP 401 * 2026-08-17: devtools: remove Cubic from local validation * 2026-08-14: mmnormalize: share turbo $! snapshot across MsgDup by refcount * 2026-08-11: tcpsrv: synchronize session table slots * 2026-08-11: imrelp: preserve errno across stop signal * 2026-08-12: examples.rst: Missing space in template * 2026-08-10: mmnormalize: merge debug metadata * 2026-08-08: normalizers: complete debug test gating * 2026-08-08: normalizers: complete debug integration * 2026-08-07: mmnormalize, pmnormalize: add liblognorm debugging * 2026-08-07: msg: ignore null values in msgSetPropViaJSON() instead of crashing * 2026-08-07: runtime: make error-message flag atomic * 2026-07-24: fuzz: exercise RFC 3164 and RFC 5424 parsers * 2026-08-05: build: unify indentation in AC_CONFIG_FILES list * 2026-07-25: imfile: fix delay.message microsecond conversion * 2026-07-24: diskqueue: reject symlinked persisted segments * 2026-06-23: omfile: control symlink following * 2026-07-25: mmnormalize: make HUP reload worker-safe * 2026-07-24: docs(agents): add Cursor Cloud environment setup notes * 2026-07-22: imbeats: harden Lumberjack input resource handling * 2026-07-23: stringbuf: harden empty string replacement * 2026-07-20: imptcp: guard regex framing match at line start (CVE-2026-19654 bsc#1271910) * 2026-07-21: rainerscript: free cnfstmtNewAct nvlst once, at the done: label * 2026-07-21: queue: preserve DA child work during shutdown * 2026-07-21: imtcp: release completed zlib decoder state * 2026-07-09: doc: clarify JSON array rendering * 2026-07-21: Potential fixes for 5 code quality findings (#7397) * 2026-07-20: ratelimit: optimize port-based per-source keys * 2026-07-20: imtcp: make zstd window budget configurable * 2026-07-19: imtcp: use snake case for zstd window tracking * 2026-07-17: imtcp: bound aggregate zstd decoder window memory * 2026-07-20: statsobj: guard Prometheus escape writes * 2026-07-18: config: do not instantiate actions disabled via config.enabled="off" * 2026-07-15: queue: document DA engine internals * 2026-07-14: msg: enforce source-property helper contract * 2026-07-10: ratelimit: remove per-source key policy hot lock * 2026-07-08: ratelimit: speed source-key shortcuts * 2026-07-15: queue: clarify DA transfer worker role * 2026-07-18: compat_queue: add missing STAILQ_FOREACH/STAILQ_NEXT fallback * 2026-07-18: rainerscript: warn on constant AND/OR operand at parse time * 2026-07-18: configure: include <stddef.h> in the STAILQ detection test * 2026-07-17: mmnormalize: share Turbo CEE root path check * 2026-07-17: mmnormalize: fall back after Turbo materialization failure * 2026-07-17: mmnormalize: preserve turbo results across message boundaries * 2026-07-17: benchmarks: harden comparison and helper inputs * 2026-07-16: segdisk: optimize CRC accounting and add benchmarks * 2026-07-15: imjournal: stop invalidation reopen busy-loop * 2026-07-14: queue: harden segmented DA lifecycle invariants * 2026-07-14: queue: harden DA portability and startup cleanup * 2026-07-14: queue: address segmented DA review findings * 2026-07-14: queue: stabilize DA shutdown and reload state * 2026-07-14: queue: clarify lazy marker and legacy state paths * 2026-07-14: queue: gate idle cleanup on durable intent * 2026-07-14: queue: document empty DA marker replacement * 2026-07-14: queue: preserve classic state on transient load errors * 2026-07-14: queue: make idle cleanup restoration crash safe * 2026-07-14: queue: fail classic DA startup on real errors * 2026-07-14: queue: clarify dirty DA configuration handling * 2026-07-14: queue: separate DA idle and worker timeouts * 2026-07-14: queue: document DA auto-upgrade boundary * 2026-07-14: queue: publish fresh DA markers on first spill * 2026-07-14: queue: constrain classic DA startup fallback * 2026-07-14: queue: clarify disabled DA idle timeout * 2026-07-14: queue: preserve classic DA startup fallback * 2026-07-14: doc: describe segmented disk-assisted queues * 2026-07-14: queue: add segmented disk-assisted engine * 2026-07-14: queue: retain adopted recovery frontier * 2026-07-14: queue: address segmented disk review findings * 2026-07-13: queue: wake workers before capacity waits * 2026-07-13: queue: make segmented deletion resumable * 2026-07-13: queue: initialize missing state in empty spool dirs * 2026-07-13: queue: reject invalid segmented codec field types * 2026-07-13: queue: avoid sanitized generation wrap * 2026-07-13: queue: expose segmented disk durability test hooks * 2026-07-13: queue: make segmented disk recovery lazy * 2026-07-09: queue: rework experimental segmented disk backend * 2026-07-08: imjournal: warn when failing to get the MESSAGE field * 2026-07-08: omawslogshlc: add CloudWatch Logs HLC output module * 2026-07-08: core: add systemd READY delay opt-in * 2026-06-02: core/imfile: synchronize sd_notify READY=1 with module startup * 2026-07-07: ratelimit: shard per-source state * 2026-07-06: docs: validate marked config samples * 2026-07-07: ratelimit: shard named config registry * 2026-07-06: runtime: harden ratelimit per-source reload * 2026-07-06: queue: align legacy action batch default * 2026-07-06: runtime: relax worker-count log reads * 2026-07-06: core: relax selected atomic flag reads * 2026-07-06: omkafka: relax poll stop flag atomics * 2026-07-06: doc: add documentation for imfile delay.message parameter * 2026-06-04: core: add generic output rate limiting * 2026-07-05: omelasticsearch: apply TLS options during detection * 2026-06-24: omprog: pace transaction retry resumes * 2026-07-02: runtime: add relaxed 32-bit atomic helpers * 2026-07-02: runtime: fix uint64 atomic fallback return * 2026-07-02: net: match legacy allowed sender hostname handling * 2026-07-02: runtime: modernize atomic helper usage * 2026-07-02: net: add modern allowedSender ACLs * 2026-07-02: queue: keep DA child workers alive while idle * 2026-07-01: runtime: add atomic read load helpers * 2026-07-01: rainerscript: align hex escape lexer states * 2026-06-30: rainerscript: accept hex object string escapes * 2026-06-30: runtime: synchronize action retry shutdown state * 2026-06-30: mmutf8fix: fix replacement sequence examples * 2026-06-16: parser: preserve first sanitize offset with SpaceLF * 2026-06-29: template: avoid new legacy octal escape * 2026-06-29: Make imptcp-epoll-add-failure.sh Linux-only * 2026-06-29: Use check_LTLIBRARIES to generate liboverride_* test libraries * 2026-06-29: doc: correct tcp_user_timeout version marker * 2026-06-23: omhttp: continue after permanent data failures * 2026-06-28: ommail: harden subject template header output * 2026-06-28: omprog/omstdout: guard empty template LF checks * 2026-06-23: tcp: skip legacy z after stream decode * 2026-06-26: omelasticsearch: escape bulk metadata values * 2026-06-24: imtcp: bound zstd decoder window * 2026-06-24: mmkubernetes: add kubernetesurl failover * 2026-06-26: docs: add v8-stable patch-flow skill to stable branch * 2026-06-26: impcap: bound-check ARP address lengths * 2026-06-26: Initialize devcontainer option state * 2026-06-26: Remove obsolete Ubuntu 18.04 dev containers * 2026-06-26: Refresh dev container cleanup * 2026-06-26: agent: add v8-stable patch flow skill * 2026-06-26: ChangeLog: split include-glob follow-up * 2026-06-26: config: keep empty include globs silent * 2026-06-26: gtls: harden DNS SAN byte handling * 2026-06-25: Codify timeoutGuard testbench invariant * 2026-06-26: imhttp: enforce gzip request body limit * 2026-06-24: imhttp: defensive fixes and auth fallback correction * 2026-06-25: doc/release: prevent invalid release version manual change * 2026-06-24: omelasticsearch: add tls.tlsversion, tls.ciphersuites, tls.keyexchangegroups * 2026-06-24: input: warn for rulesets without queues * 2026-06-24: ommongodb: preserve ISODate fractional seconds * 2026-06-24: imuxsock: clarify missing Socket diagnostics * 2026-06-24: rsyslogd: reject -o output over input config * 2026-06-24: template: add timereceived property alias * 2026-06-24: imudp: store received sockaddr length * 2026-06-23: imfile: warn on duplicate file monitors * 2026-06-24: omudpspoof: stop retrying failed fragments * 2026-06-23: gtls: guard early debug-level lookup (bsc#1274610) * 2026-06-23: statsobj: handle lock control failures * 2026-06-23: build: avoid empty usertools install dirs * 2026-06-23: imdocker: recover from stale since anchors * 2026-06-23: tcpflood: add GnuTLS priority string option * 2026-06-23: imjournal: add journal namespace support * 2026-06-23: prepare for next scheduled stable release cycle * 2026-06-23: doc: clarify omprog transaction mode status * 2026-06-23: errmsg: enrich oversize errorfile records * 2026-06-23: omelasticsearch: retry read-only bulk failures * 2026-06-23: doc: clarify fromhost case handling * 2026-06-23: doc: clarify ommysql data failures * 2026-06-23: omuxsock: isolate action socket locks * 2026-06-16: template: add octal control character escape * 2026-06-16: omfwd: add TCP user timeout action option * 2026-06-15: mmutf8fix: support replacement sequences * 2026-06-09: [Modernization] Replace Internal Backticks with Shell Expansion: Rscript Batch 1 * 2026-06-08: diag.sh: fix content-pattern-check and assert-first-column-sum-greater-than * 2026-06-23: imtcp: add stream compression support * 2026-06-23: docs: add queue-full troubleshooting * 2026-06-22: mmpstrucdata: document structured-data buffer invariant * 2026-06-21: doc: refine object terminator wording * 2026-06-21: doc: clarify security release handling * 2026-06-21: doc: clarify RainerScript semicolon use * 2026-06-20: rainerscript: escape embedded NULs at C-string boundary * 2026-06-20: doc: explain service sandboxing for helpers * 2026-06-20: doc: address service sandboxing review * 2026-06-20: Apply suggested fix to tools/pmrfc3164.c from Copilot Autofix * 2026-06-19: rainerscript: fold constant comparisons * 2026-06-18: doc: clarify partial config validation * 2026-06-18: config: warn on constant boolean operands * 2026-06-17: parser: honor parseHostnameAndTag in RFC3164 parser * 2026-06-17: core: fix negated exact priority filters * 2026-06-16: rainerscript: keep random result non-negative * 2026-06-16: rainerscript: add cbool function * 2026-06-16: pmrfc3164: honor parseHostnameAndTag at runtime * 2026-06-16: msg: invalidate programname when tag changes * 2026-06-16: imfile: deliver same-file monitors independently * 2026-06-16: glbl: keep debug logfile notice informational * 2026-06-16: doc: modernize GELF forwarding tutorial * 2026-06-15: ommail: add SMTP mode test * 2026-06-15: mmjsonparse: modernize test output paths * 2026-06-14: parser: add optional trailing CR stripping * 2026-06-14: ompgsql: accept long server hostnames * 2026-06-14: dynstats: warn on duplicate bucket names * 2026-06-14: action: warn on duplicate action names * 2026-06-13: omfwd: use matching atomic mutex helper * 2026-06-08: Merge pull request #7014 from rsyslog/cursor/critical-correctness-bugs-480c * 2026-06-05: omazureeventhubs docs: fix underscored parameters * 2026-06-04: runtime: fix YAML promotion OOM ownership * 2026-06-04: omuxsock docs: correct template parameter * 2026-06-04: omhttp: own Splunk profile template names * 2026-06-04: mmjsonparse: reject boundary trailing data * 2026-06-04: mmdblookup: preserve uint64 values * 2026-06-04: mmdblookup: check uint64 fallback formatting * 2026-06-04: impstats docs: fix dotted log parameters * 2026-06-04: impstats docs: clarify parameter name guidance * 2026-06-04: imkafka: stop workers on startup failure * 2026-06-04: imkafka: refine startup stop flag handling * 2026-06-04: doc: match Sphinx duplicate CLI override handling * 2026-06-04: doc: keep stable git docs out of dev mode * 2026-06-04: doc: format stable rst_prolog metadata * 2026-06-04: doc: fix database tutorial SQL template option * 2026-06-03: regexp: avoid per-thread shutdown double-free * 2026-06-03: omkafka: fix NULL topic and add action name to onDestroy flush logs * 2026-06-03: mmsnareparse: honor searchWindow in tabbed trailing scan * 2026-06-03: mmsnareparse: cap tab trailing search by token * 2026-06-03: imfifo: guard absent module config paths * 2026-06-03: imfifo: bind instances to module config * 2026-06-03: imdiag: fix stats reporting gate * 2026-06-03: imdiag: avoid checked cond signal while locked * 2026-06-03: docker: gate collector imtcp module * 2026-06-03: docker: derive single imtcp enable switch * 2026-06-03: docker: default derived imtcp switch in collector * 2026-06-02: yamlconf: clean up include recursion guard * 2026-06-02: tls: propagate wolfSSL send-side read retry * 2026-06-02: tls: keep wolfSSL send retry local * 2026-06-02: tls: bound wolfSSL send-side read retries * 2026-06-02: sidecar: cap UDP burst buffer by total bytes * 2026-06-02: runtime: include limits.h for INT_MAX in yamlconf * 2026-06-02: runtime: guard against recursive YAML includes * 2026-06-02: runtime/queue: reset sizeOnDisk after safe recovery * 2026-06-02: rainerscript: accept optimizer NOP statements * 2026-06-02: omkafka: fix HUP deadlock when doAction holds mut_doAction (#7129) * 2026-06-02: omhttp: avoid retry-ruleset self-stall * 2026-06-02: omhiredis: fix TLS context error log * 2026-06-02: mmpstrucdata: support custom SD containers (CVE-2026-61548 bsc#1272414) * 2026-06-02: mmjsonparse: fix find-json ownership and scan bounds * 2026-06-02: mmjsonparse: clear JSON pointer after ownership transfer * 2026-06-02: devtools: fold local review experiment into planner * 2026-06-01: translate: cover script serialization (#7152) * 2026-06-01: dev_env: include lcov in Ubuntu coverage images * 2026-06-01: ChangeLog: update 8.2606 entries * 2026-06-01: Add parse_time_localtz with documentation * 2026-05-31: runtime: join final worker after shutdown wait * 2026-05-31: runtime: harden raw message replacement growth * 2026-05-31: runtime: fix $!all-json serialization locking * 2026-05-31: ratelimit: centralize per-source enforcement * 2026-05-31: parser: fix NetAddr cleanup on mask parse errors * 2026-05-31: omclickhouse: report HTTP response errors * 2026-05-31: omclickhouse: document SQL template option * 2026-05-31: omclickhouse: clean up JSON root on OOM * 2026-05-31: action: avoid committing suspended retry batches * 2026-05-31: Keep transactional action queue messages on shutdown * 2026-05-30: rainerscript: add tocef() and cef_ext_escape() for CEF output * 2026-05-30: doc: clarify queue crash durability limits * 2026-05-30: devtools: add read-only C format check * 2026-05-29: tls: propagate send-side receive retry * 2026-05-29: tls: preserve send-side receive retry state * 2026-05-29: tls: preserve send retry without reconnect * 2026-05-29: tls: keep wolfSSL send-side retry local * 2026-05-29: tls: keep send-side read retries local * 2026-05-29: template: apply style-check formatting * 2026-05-29: style: format msg replacement tests * 2026-05-29: runtime: fix msg replace helper CI failures * 2026-05-29: omkafka: fix suspension not triggered on host resolution failure * 2026-05-29: omfwd: schedule retry for deferred TCP flush * 2026-05-29: omfwd: preserve connection on retryable TLS sends * 2026-05-29: omfwd: avoid tcpclt leak on rebind * 2026-05-29: mmsnareparse: preserve regex end-anchor semantics * 2026-05-29: imudp: validate listen port formatting * 2026-05-29: imudp: harden listen port file writes * 2026-05-29: imptcp: simplify compression auto probe * 2026-05-29: imkafka: support multiple topics in one input() instance * 2026-05-29: imjournal: warn when newest entry is in the future * 2026-05-29: imjournal: handle clock jumps in future probe * 2026-05-29: docs: strengthen GHSA prompt guardrails * 2026-05-29: add func doFunct_ParseTimeLocalTz * 2026-05-29: Update doc/security/ghsa-coordination-review-template.md * 2026-05-29: Fix rawmsg suffix shift on realloc * 2026-05-29: Fix msg replacement and JSON set handling * 2026-05-29: Apply suggested fix to tests/mmexternal-response-too-long.sh from Copilot Autofix * 2026-05-28: tls: keep send retry state internal * 2026-05-28: template: reject invalid regex match selectors * 2026-05-28: template: guard NULL property rendering * 2026-05-28: packaging: use ETL Vespa env defaults directly * 2026-05-28: packaging: default ETL TLS envs in entrypoint * 2026-05-28: omelasticsearch: apply clang-format to version probe error * 2026-05-28: mmjsontransform: fix dotted conflict ownership * 2026-05-28: mmexternal: fix single-instance reply handling * 2026-05-28: mmexternal: fix EINTR reply handling * 2026-05-28: mmdblookup: clean up failed worker creation * 2026-05-28: imuxsock: handle embedded NUL datagrams safely * 2026-05-28: imptcp: harden auto compression probe * 2026-05-27: tls: preserve recv data during send-side reads * 2026-05-27: tls: avoid recv-helper misuse in send WANT_READ * 2026-05-27: tls: avoid receive retry state during send * 2026-05-27: template: fix jsonftree flat fallback framing * 2026-05-27: runtime: reject embedded NULs in mbedtls cert names * 2026-05-27: runtime: initialize ratelimit mutex once * 2026-05-27: runtime: guard per-thread regexp iterator allocation * 2026-05-27: runtime: fix fromhost-port extraction before rcvFrom union swap * 2026-05-27: runtime: clean up DNS props on port allocation failure * 2026-05-27: runtime-format-regexp-lifecycle-guards * 2026-05-27: regexp-clean-up-per-thread-entries * 2026-05-27: packaging: expose Vespa HTTPS toggles * 2026-05-27: packaging: enable HTTPS by default for ETL Vespa output * 2026-05-27: omusrmsg: enable thread-safe action ratelimiter * 2026-05-27: omotel: use getProgramName() when deriving app name * 2026-05-27: omotel: avoid const cast for app name extraction * 2026-05-27: ommysql: handle closed connection before commit * 2026-05-27: omkafka: harden failed delivery replay paths * 2026-05-27: omhttp: refresh health-check headers after gzip rebuild * 2026-05-27: omhttp: keep health-check headers uncompressed * 2026-05-27: omelasticsearch: bound startup version probe response size * 2026-05-27: mmsnareparse: skip full digit runs in event probe * 2026-05-27: mmsnareparse: preserve anchored trailing regex matches * 2026-05-27: mmsnareparse: cap regex input in trailing token * 2026-05-27: mmsnareparse: avoid quadratic provider scans in snare probe * 2026-05-27: mmjsontransform: fix child ownership on dotted merge conflicts * 2026-05-27: mmjsontransform: clean up dotted insert ownership * 2026-05-27: mmanon: remove assert on malformed embedded IPv4 * 2026-05-27: mmanon: make random suffix generation fully reachable * 2026-05-27: mmanon: build random suffix from byte chunks * 2026-05-27: mbedtls-refine-nul-name-checks * 2026-05-27: mbedtls-apply-cert-name-style * 2026-05-27: lookup: report active table reloads as pending * 2026-05-27: lmsig-ksi-bound-debug-precision * 2026-05-27: imptcp: serialize helper work per session * 2026-05-27: imptcp: add stream:auto compression mode * 2026-05-27: imfifo: implement named pipe input module (#7029) * 2026-05-27: dynstats: coalesce pending persistence writes per bucket * 2026-05-27: dynstats-unlock-on-task-alloc-failure * 2026-05-27: docker: fix clickhouse configure flag in Debian 13 dev image * 2026-05-27: doc: use literal markup for TLS parameters * 2026-05-27: doc: fix shutdown.enable.ctlc spelling in rsyslogd man page * 2026-05-27: doc: fix mmrfc5424addhmac sd_id parameter name * 2026-05-27: doc: clarify mbedtls requires StreamDriverMode=1 for TLS * 2026-05-27: configure: detect relpCltSetKeepAlive support * 2026-05-26: stats: avoid notifier teardown deadlocks * 2026-05-26: runtime: guard optional regexp object lifecycle in tcp server * 2026-05-26: runtime: bound KSI debug record logging by length * 2026-05-26: runtime: avoid regexp unload double free * 2026-05-26: ratelimit: avoid double free on helper error paths * 2026-05-26: perctile: reuse counter cleanup helper * 2026-05-26: perctile: link buckets after initialization * 2026-05-26: ossl: avoid caching OCSP responses past nextUpdate * 2026-05-26: omazuredce: bound HTTP response buffering * 2026-05-26: omazuredce: avoid gzip buffer underallocation * 2026-05-26: omazuredce-review-followup * 2026-05-26: imuxsock: enforce ratelimit.name for credentialed senders * 2026-05-26: imuxsock-ratelimit-credential-followup * 2026-05-26: impstats: fix double-free in remote write batching cleanup * 2026-05-26: imkafka: cap split.json.records fan-out * 2026-05-26: imdocker: keep stream alive on rate-limit drops * 2026-05-26: imdocker: bound multiline segment compaction * 2026-05-26: imdocker: apply clang-format output * 2026-05-26: configure: avoid leaking -lgcrypt into global LIBS * 2026-05-25: shellcheck: fix masked test assignments * 2026-05-25: runtime: validate numeric hardening inputs * 2026-05-25: runtime/nsd_gtls: validate IP SAN length before conversion * 2026-05-25: parser: verify and fix offAfterPRI calculation * 2026-05-25: omhiredis: derive TLS server name from server config * 2026-05-25: omfwd: require peers for targetSrv TLS name auth * 2026-05-25: omfwd: clarify targetSrv TLS auth error * 2026-05-25: nsd_gtls: preserve SAN-present state for malformed IP SAN * 2026-05-25: imhttp: write bound listener port to file * 2026-05-25: imdtls: write bound listener port to file * 2026-05-25: fix(imhiredis): default TLS peer name to configured server * 2026-05-24: tools: make AIX SRC reply copy bounded * 2026-05-24: statsobj: clear lock flag after prometheus unlock * 2026-05-24: runtime: clamp emulated RFC5424 tag length * 2026-05-24: runtime: avoid post-fork malloc in execProg * 2026-05-24: runtime/statsobj: lock stats list during iteration * 2026-05-24: nsd_mbedtls: reject RemoteSNI and wire interface * 2026-05-24: nsd_mbedtls: fill remote port interface methods * 2026-05-24: mmjsontransform: track per-insert conflicts * 2026-05-24: mmjsontransform: avoid leak on policy insert conflict * 2026-05-24: mmjsonparse: avoid json double-free on add failure * 2026-05-24: mmexternal: avoid undrained stdout/stderr pipe in output=none mode * 2026-05-24: mmexternal: address output pipe review findings * 2026-05-24: impstats: harden overwrite temp file creation * 2026-05-24: imjournal: treat rate-limit discards as non-fatal in readjournal * 2026-05-24: gssapi: use uint32_t for token wire length * 2026-05-24: gssapi: fix token length framing endianness in sender * 2026-05-24: fix(tools): guard AIX SRC reply text against NULL * 2026-05-23: rainerscript: fix array and numeric comparisons on JSON vars * 2026-05-23: privdrop: update privilege drop comments * 2026-05-23: privdrop: log capability context on drop failure * 2026-05-23: omelasticsearch: guard dynamic template strings * 2026-05-23: omelasticsearch: cache action template count * 2026-05-23: imjournal: restore cursor after recovery reopen * 2026-05-23: imjournal: recover from stale saved cursor * 2026-05-23: imjournal: harden journal invalidation recovery * 2026-05-23: imjournal: avoid rotation accounting during recovery * 2026-05-23: docs: clarify local validation gates * 2026-05-23: contrib, runtime: defensive stability and robustness hardening * 2026-05-23: codex: wire local container testing hook into agent workflow * 2026-05-22: shell: clean up ShellCheck findings * 2026-05-22: python: clean up style and add optional checks * 2026-05-22: net_ossl: document SAN-priority hard-stop on old API * 2026-05-22: msg: guard MSG replacement offsets (bsc#1272414) * 2026-05-22: mmexternal: support one-way helpers and response timeouts * 2026-05-22: imptcp: unlink failed accepted sessions * 2026-05-22: imjournal: fix double-free hazards on JSON objects * 2026-05-22: imfile: add line-number metadata and soften empty checks * 2026-05-22: imdocker: terminate compacted multiline buffers * 2026-05-22: imbeats: harden pointer transfer in submitEvent * 2026-05-22: contrib, plugins: refine pointer hand-off in imhiredis, mmjsonparse, mmsequence * 2026-05-22: contrib, plugins: defensive pointer hand-off hardening * 2026-05-22: config: warn for unmatched include globs * 2026-05-22: agents: document optional local linters * 2026-05-21: template: harden property rendering bounds * 2026-05-21: tcpsrv: guard listener destructors against NULL references * 2026-05-21: tcps_sess: secure regex memory reallocation and destructor * 2026-05-21: style: format wolfSSL CRL helper * 2026-05-21: ruleset: guard synchronous recursive calls * 2026-05-21: rainerscript: harden string and JSON bounds * 2026-05-21: pm/fm: defensively harden parsing edge cases * 2026-05-21: ossl: enable wolfSSL CRL checks for DER files * 2026-05-21: net_ossl: avoid CN fallback when SAN priority unsupported * 2026-05-21: mmgrok: keep configured source immutable * 2026-05-21: lookup: harden shutdown lifecycle * 2026-05-21: imudp: harden thread lifecycles and fix stats memory leak * 2026-05-21: imtcp: harden listener setup and legacy config cleanup * 2026-05-21: imjournal: defensive memory safety and stability hardening * 2026-05-21: docs: codify GHSA coordination workflow * 2026-05-21: docs: clarify GHSA triage scope * 2026-05-21: docs: add distro component package map * 2026-05-21: docs: add GHSA coordination template * 2026-05-21: contrib: harden buffer and parser bounds handling * 2026-05-21: agent: document local CI preflight tiers * 2026-05-21: Update tests/imptcp_uds_unlink.sh * 2026-05-21: Apply suggested fix to tests/imptcp_uds_unlink.sh from Copilot Autofix * 2026-05-20: ossl: bound OCSP network reads * 2026-05-20: mmanon: defensively harden IP suffix parsing * 2026-05-20: lookup: reject duplicate table names * 2026-05-20: imptcp: harden concurrency, boundaries, and memory safety * 2026-05-20: gtls: log peer IP for missing client cert * 2026-05-20: config: add global maxOpenFiles setting * 2026-05-20: build: fix ARMv7 warnings under Werror * 2026-05-20: agents: add ChangeLog maintenance skill * 2026-05-20: Update tests/imptcp-discard-truncated-msg-same-session.sh * 2026-05-20: ChangeLog: update 8.2606 entries * 2026-05-20: Apply suggested fix to tests/imptcp-discard-truncated-msg-same-session.sh from Copilot Autofix * 2026-05-20: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix * 2026-05-19: imptcp: discard oversize byte after truncation * 2026-05-18: tcp: log pre-truncated oversize frames * 2026-05-18: runtime: avoid libgcry IV shift UB * 2026-05-18: grammar: read pseudo-files in backtick cat * 2026-05-18: docker: add container regex noise filter * 2026-05-18: doc: remove unavailable StdJSONFmt reference * 2026-05-18: agents: require available container validation * 2026-05-18: agents: clarify PR babysitting decisions * 2026-05-18: ChangeLog: remove duplicate release blocks * 2026-05-18: Apply suggested fix to doc/source/reference/templates/templates-reserved-names.rst from Copilot Autofix * 2026-05-17: omelasticsearch: document error-file modes * 2026-05-17: doc: list RFC5424 reserved template * 2026-05-17: doc: clarify omfile timed flush behavior * 2026-05-17: doc: clarify omfile legacy action separation * 2026-05-17: containers: update libyaml dev image dependencies * 2026-05-17: containers: remove stale dev images * 2026-05-17: containers: enable libyaml in Fedora dev images * 2026-05-17: containers: enable libyaml in CentOS and Debian CI * 2026-05-17: build: honor cross pkg-config for libgcrypt * 2026-05-16: devcontainer: remove anonymous helper volumes * 2026-05-16: configure: make libyaml default-on explicit * 2026-05-16: agents: clarify test intent comment rule * 2026-05-15: ommail: add sendmail delivery mode * 2026-05-15: omelasticsearch: warn on searchType use * 2026-05-15: imdiag: add module-only modern config * 2026-05-15: agents: clarify PR babysitting stop condition * 2026-05-15: agents: add issue triage skill * 2026-05-15: Potential fixes for 2 code quality findings (#6909) * 2026-05-14: skills: clarify container validation escalation * 2026-05-14: omfile: reject failed dynafile pre-opens * 2026-05-14: net_ossl: fix clang-format style in CRL warning * 2026-05-14: java: use nio writer in simple plugin skeleton * 2026-05-14: imuxsock: reject contradictory socket ownership * 2026-05-14: imfile: recover more inotify file updates * 2026-05-14: Update .agent/skills/rsyslog_test/SKILL.md * 2026-05-13: runtime: add STAILQ fallback for AIX * 2026-05-13: net_ossl: fix CRL stack leak when cert store is NULL * 2026-05-13: narrow CODEOWNERS ownership * 2026-05-13: imdiag: add injectmsg delay option * 2026-05-13: devcontainer: quote git common dir mount * 2026-05-13: agents: document local overlay lookup * 2026-05-13: queue: add per-queue size.enqueued counter (cumulative bytes) * 2026-05-12: omrelp: allow TLS auth failure suspension * 2026-05-12: imbeats: multiplex sessions for high client counts * 2026-05-12: imbeats: harden batch parsing limits * 2026-05-12: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix * 2026-05-12: Apply suggested fix to tests/imptcp-NUL.sh from Copilot Autofix * 2026-05-11: runtime: harden atomic helper fallbacks * 2026-05-11: packaging/rpm: add rsyslog-imbeats subpackage * 2026-05-11: java: harden skeleton file handling * 2026-05-11: imbeats: verify raw and amended ES pipeline * 2026-05-11: imbeats: track cumulative Lumberjack sequences * 2026-05-11: imbeats: tolerate interrupted poll calls * 2026-05-11: imbeats: test Filebeat to Elasticsearch pipeline * 2026-05-11: imbeats: harden compressed frame parsing * 2026-05-11: imbeats: add Elastic Beats input module * 2026-05-11: imbeats: add Elastic Agent Windows fixture test * 2026-05-11: Apply suggested fix to tools/ompipe.c from Copilot Autofix * 2026-05-11: Apply suggested fix to tests/syslog_caller.c from Copilot Autofix * 2026-05-11: Apply suggested fix to runtime/atomic.h from Copilot Autofix * 2026-05-11: Apply suggested fix to doc/ai/security_triage_rubric.md from Copilot Autofix * 2026-05-10: imuxsock: harden trusted property annotation buffer * 2026-05-10: immark: harden runtime config lifetime * 2026-05-10: doc: add security triage rubric for AI agents * 2026-05-10: [HARDENING] imjournal: harden disk usage stats update * 2026-05-10: [HARDENING] imdiag: clarify controlled diagnostics usage * 2026-05-09: hardning: harden config parameter ownership and OOM cleanup * 2026-05-09: config: add compatibility controls and secure defaults * 2026-05-08: rosi-collector: prevent Loki 400 queue stalls * 2026-05-08: omdtls: check config string allocations * 2026-05-08: mmrfc5424addhmac: harden SD-ID handling * 2026-05-08: mmleefparse: check config string allocations * 2026-05-08: imbeats: join session threads during teardown * 2026-05-08: Fix chkseq EOF handling * 2026-05-07: python: make file cleanup lexical * 2026-05-07: python: fix external plugin comment typos * 2026-05-07: python: close script file handles * 2026-05-07: imudp: add dynamic listen port files * 2026-05-07: impstats: remove obsolete svg jquery asset * 2026-05-07: doc: harden docs config AI fixes * 2026-05-07: devcontainer: allow sudo for mapped users * 2026-05-07: Update doc/source/conf_helpers.py * 2026-05-07: Fix operator precedence in conditions * 2026-05-07: Apply suggested fix to tests/omfwd-lb-1target-retry-test_skeleton-TargetFail.sh from Copilot Autofix * 2026-05-07: Apply suggested fix to tests/chkseq.c from Copilot Autofix * 2026-05-07: Apply suggested fix to doc/source/conf_helpers.py from Copilot Autofix * 2026-05-06: scripts: restore repo policy helpers * 2026-05-06: scripts: align module policy evaluator name * 2026-05-06: net_ossl: support CRL/OCSP revocation on wolfSSL * 2026-05-06: java: simplify simple plugin file creation * 2026-05-06: impstats: clean up svg jquery findings * 2026-05-06: impstats: avoid analyzer wildcard import * 2026-05-06: doc: import optional extensions during probe * 2026-05-06: doc: broaden optional extension probe errors * 2026-05-06: doc: avoid unused python imports * 2026-05-06: Apply suggested fix to packaging/docker/rsyslog/standard/Dockerfile from Copilot Autofix * 2026-05-05: ratelimit: preserve severity sentinel on s390x * 2026-05-05: imtcp: wait for mbedtls diagnostics in tests * 2026-05-05: imtcp test: capture mbedtls diagnostics directly * 2026-05-05: Add Ubuntu WSL development setup * 2026-05-04: improg: stop on child stdout EOF * 2026-05-04: github action: remove issue labler * 2026-05-04: codeql: silence unused global findings * 2026-05-04: codeql: add explicit Python fallbacks * 2026-05-04: Apply suggested fix to runtime/datetime.c from Copilot Autofix * 2026-04-30: ossl: match PermittedPeer wildcards against cert identities * 2026-04-30: Fix omrelp TLS auth failure CPU spin * 2026-04-29: packaging/rpm: Add omotel OpenTelemetry Sub-package * 2026-04-28: packaging: add multi-arch container release publishing * 2026-04-28: Fix RFC3339 formatting for high-precision secfrac * 2026-04-25: queue: quarantine runtime disk corruption safely * 2026-04-25: imfile test: stabilize async logrotate drain * 2026-04-25: Add security policy * 2026-04-24: imhttp: harden request parsing and cleanup (#6758) * 2026-04-24: imdocker: stabilize image-name test * 2026-04-23: omuxsock: fix message loss bug for connected Unix domain sockets (#6750) * 2026-04-23: imfile: release deleted-file FDs after FILE_DELETE_DELAY in inotify mode * 2026-04-23: .codex: restore wrapped git commit hook matching * 2026-04-22: omusrmsg: guard empty systemd session lists * 2026-04-22: omfwd: avoid recursive target teardown * 2026-04-22: fmhash: fix build issue * 2026-04-22: doc: update modules documentation (#6714) * 2026-04-21: prepare for next scheduled stable release cycle * 2026-04-20: style: format obj helper declaration * 2026-04-20: style: drop redundant cstr null checks * 2026-04-20: queue: harden corrupt disk queue recovery * 2026-04-20: queue: delete orphaned disk queue write files * 2026-04-20: prepare for 8.2604.0 release * 2026-04-20: omfwd: flush pending data before zip teardown * 2026-04-20: imptcp: harden stream compression handling * 2026-04-20: doc: shrink ROSI architecture image in dist * 2026-04-19: imfile: harden state file handling * 2026-04-19: core: harden string allocation and copy handling * 2026-04-18: omotel: ignore generated protobuf tree * 2026-04-18: imkafka: harden worker startup and teardown * 2026-04-18: imhiredis: place stream index helper before use * 2026-04-18: imhiredis: harden stream index parsing and setup * 2026-04-18: imdocker: harden setup and URL construction * 2026-04-18: imdocker,imhiredis: fix curl teardown and style * 2026-04-17: imudp,imdtls: harden listener setup paths * 2026-04-17: imdtls: disable failed listeners cleanly * 2026-04-17: gssapi: fix token timeout handling * 2026-04-17: gssapi: fix interrupted token io loops * 2026-04-17: doc: clarify severity-aware shared ratelimit use * 2026-04-16: imjournal: harden state file handling * 2026-04-16: im3195: harden RFC3195 callback handling * 2026-04-16: gssapi: improve robustness and listener handling * 2026-04-15: runtime: harden queue config and worker handling * 2026-04-15: omfile: harden dynafile cache validation * 2026-04-15: omfile: address review follow-up cleanups * 2026-04-14: omrelp: use stable data in librelp callbacks * 2026-04-14: omrelp: use generic code in onErr * 2026-04-14: omfwd: support musl resolver APIs * 2026-04-14: omelasticsearch: fix port detection for IPv6 server addresses * 2026-04-14: imhttp: add route-scoped API key authentication * 2026-04-14: configure: reduce resolver link probe * 2026-04-14: configure: link resolver libs on solaris * 2026-04-14: configure: gate omfwd resolver APIs * 2026-04-13: runtime: add watched policy reload scheduling * 2026-04-13: ratelimit: free dropped TCP messages on helper errors * 2026-04-13: [Modernization] Replace Internal Backticks with Shell Expansion: Misc test files * 2026-04-13: Add missing mmdb files to tests/Makefile.am * 2026-04-12: runtime: cleanup zero-size alloc handling * 2026-04-12: rsconf: clarify stale loadConf comments * 2026-04-12: ratelimit: keep TCP batch processing on drops * 2026-04-12: omhttp: harden payload length handling * 2026-04-12: imuxsock: bound per-pid ratelimiter cache * 2026-04-12: imtcp: harden limit validation and worker shutdown * 2026-04-12: impstats: clean up minor report nits * 2026-04-12: fix(imtcp): fix typos and remove duplicate assignments in imtcp.c * 2026-04-12: Fix for Unused import * 2026-04-12: Fix for File is not always closed * 2026-04-11: add compression option with new test and changed request building * 2026-04-09: runtime: harden stringbuf contains matching * 2026-04-09: runtime: harden TCP framing size handling * 2026-04-08: mmutf8fix: also fix invalid UTF-8 in RFC 5424 structured data * 2026-04-07: ratelimit: watch YAML policy files with debounce * 2026-04-06: [Modernization] Replace Internal Backticks with Shell Expansion * 2026-04-06: Discard partial map/array objects on error * 2026-04-04: doc: document omfwd connection statistics * 2026-04-03: runtime: map common legacy selector actions to YAML * 2026-04-03: runtime: harden YAML string-node OOM handling * 2026-04-03: runtime: emit structured YAML for simple translations * 2026-04-03: grammar: fix YAML script buffer filename leak * 2026-04-02: runtime: add config translation mode * 2026-03-31: omelasticsearch: suspend action on 5xx or 429 HTTP status codes * 2026-03-31: omelasticsearch: check HTTP status code in checkConn health check * 2026-03-31: [build]: require OpenSSL if imdtls or omdtls is used * 2026-03-30: mmjsontransform: reload transformation mode from policy * 2026-03-30: mmjsontransform: add YAML policy processing * 2026-03-30: build: stop shipping .gitignore files * 2026-03-30: [codex] doc: fix random sampling example (#6678) * 2026-03-30: [General]: Install tzdata in default docker image * 2026-03-30: Fix DoS in imjournal sd_journal_wait * 2026-03-29: doc: remove stray merge marker in deployments index * 2026-03-29: doc: clarify YAML positioning and workflow guidance * 2026-03-28: yamlconf: warn on duplicate top-level keys, document as unsupported * 2026-03-28: scripts: add doc-xref-sync linter check for broken :doc: references * 2026-03-28: doc: register design_decisions.rst in EXTRA_DIST * 2026-03-28: doc(yamlconf): fix EXTRA_DIST entry and cross-reference path * 2026-03-28: doc(yamlconf): add architecture doc, expand RainerScript relation * 2026-03-28: doc(yaml_config): add version requirement note (8.2604.0+) * 2026-03-28: doc(conf_formats): use FmtYamlName macro, fix macro-in-bold issue * 2026-03-28: doc(conf_formats): add YAML as fourth format option, cross-link pages * 2026-03-27: test(yaml-unset): guard against false pass when verify file is absent * 2026-03-27: refactor(yamlconf): extract nvlst helper, add Doxygen, fix test coverage * 2026-03-27: feat: add YAML as an alternative configuration format * 2026-03-27: docs(agents): add rsyslog_config skill and config parity guidance * 2026-03-27: doc(yamlconf): improve completeness of YAML config reference * 2026-03-27: doc(yamlconf): fix malformed RST grid table (Set row off by one space) * 2026-03-27: devtools: add repo-local Codex commit hook * 2026-03-26: feat: add YAML as an alternative configuration format * 2026-03-26: feat(yamlconf): add filter/actions shortcut for rulesets * 2026-03-25: omhttp: reuse curl handles and coordinate health checks * 2026-03-25: omhttp: fix shared health state and gzip headers * 2026-03-24: gtls: check CRL expiration, reject connections with expired CRL * 2026-03-23: doc: imptcp: remove outdated 16-thread limit note * 2026-03-21: doc/container: mark ETL image experimental * 2026-03-20: update doc url in README.md * 2026-03-20: doc: sync container docs with current images * 2026-03-20: doc: fix ROSI link audience in overview pages * 2026-03-19: doc: link ROSI references to overview page * 2026-03-19: doc: improve ROSI navigation and scope notes * 2026-03-19: doc: broaden ROSI framing beyond collector * 2026-03-18: doc: document Windows clients in ROSI Collector * 2026-03-18: doc: add ROSI stack deployment tutorial * 2026-03-16: omfwd: add num.connects statistic for TCP connection tracking * 2026-03-16: imfile: preserve symlink cleanup notifications with deferred destroy * 2026-03-16: core: Fix typos in comments * 2026-03-13: doc: Fix Mermaid diagrams and unify build output to build/ * 2026-03-11: tls: add native post-quantum guidance and tests * 2026-03-11: packaging: add Ubuntu package build CI for focal, jammy, noble * 2026-03-10: docs: clarify PrioritizeSAN fallback behavior and auth mode prerequisite * 2026-03-10: Add azure Monitor API ingestion module * 2026-03-04: Use suggested error handling when node becomes NULL mid-loop * 2026-03-04: Remove "ifdef json_type_uint64" * 2026-03-04: Discard partial map/array objects on error * 2026-03-04: Add uint64 handling if it is supported * 2026-03-03: rpm: packaging overhaul, CI job, and review fixes * 2026-03-02: imjournal documentation: FileCreateMode was introduced in v8.2306.0 * 2026-03-02: docs: remove -c5 from troubleshooting example * 2026-02-27: Revert "docs: Add ROSI Collector Hetzner Cloud tutorial" * 2026-02-26: ratelimit: wire ratelimit.name into remaining modules * 2026-02-26: omusrmsg: add ratelimit support * 2026-02-26: omkafka: add poll thread; fix races and deprecated usleep * 2026-02-26: imrelp: add ratelimit support (interval, burst, name) * 2026-02-26: Stop all outer recursive loops in MAP case on corrupted data * 2026-02-26: Skip truncated field * 2026-02-26: Replace Variable-Length Array with fixed sized one * 2026-02-26: Address style/formatting issues * 2026-02-26: Add json NULL checks * 2026-02-25: packaging: Update RHEL Docker Build Image * 2026-02-25: omotel: add native protobuf encoding (http/protobuf) * 2026-02-25: docs: Add ROSI Collector Hetzner Cloud tutorial * 2026-02-25: doc: add deterministic HTML link validation in docs CI * 2026-02-25: Update mmdblookup so it does not rely on JSON dump * 2026-02-24: doc: fix stale relative links causing malformed paths * 2026-02-24: doc: bump footer copyright year to 2026 * 2026-02-24: doc: add ROSI guides and beginner infographic * 2026-02-24: Codex/process GitHub issue 4697 (#6582) * 2026-02-23: runtime: close worker-start cancellation race * 2026-02-22: doc: update canonical location for doc set * 2026-02-18: tools: fix linking issue with libyaml * 2026-02-18: runtime: refactor dynstats meta-counter name assembly * 2026-02-18: prepare for next scheduled stable release cycle * 2026-02-18: doc: fix release_string_detail NameError, narrow deploy to main only * 2026-02-18: doc: add GitHub Actions workflow to deploy docs with GA to Pages * 2026-02-18: doc: add GA support with input validation and fallback (#6561) * 2026-02-18: core: expand checked literal copies across fixed buffers * 2026-02-17: doc: add optional Google Analytics via sphinxcontrib-googleanalytics (#6559) * 2026-02-17: ChangeLog: correct overhyped feature * 2026-02-17: ChangeLog: add missing entry * 2026-06-23: bump version number for scheduled stable release * 2026-02-16: configure: default-enable impstats push build support (#6542) * 2026-02-16: better handle copy of constant string to ip address buffer (#6557) * 2026-02-13: imjournal: fix stats counter type for uint64 fields * 2026-02-13: doc: restructure impstats reference for clearer modes * 2026-02-13: doc: expand impstats push docs and FAQ coverage * 2026-02-13: doc: describe impstats push mode for VictoriaMetrics * 2026-02-13: doc: add impstats VictoriaMetrics push tutorial * 2026-02-11: runtime: iterate ptcp addresses and validate bind device * 2026-02-11: feat(rosi-collector): impstats sidecar on server, Grafana rate limits, docs * 2026-02-08: packaging/docker: trim ubuntu24 image build artifacts * 2026-02-08: omhttp: add VictoriaLogs jsonline CI test * 2026-02-08: curl modules: pass long literal to CURLOPT_POST * 2026-02-06: omhttp: reuse reply buffer with cap and safer sizing * 2026-02-06: github action security follow up (#6532) * 2026-02-06: build: normalize object prototypes and remove decl noise * 2026-02-04: Sentinel: Fix buffer overflow risk in datetime formatting * 2026-02-04: doc: fix conflict markers in omhdfs-omhdfsport.rst * 2026-02-04: Fix infinite loop in re_extract when regex matches empty string * 2026-02-04: Codex/fix issue #6517 in rsyslog (#6520) * 2026-02-03: runtime: lower internal message rate defaults * 2026-02-03: rosi-collector: add Syslog Health (impstats) dashboard and client sidecar * 2026-02-03: doc: improve sparseArray doc and suggest is_in_subnet * 2026-02-03: doc/ommail: correct CRLF escaping; bind body template * 2026-02-03: Fix lookup table reload race condition (Device or resource busy) * 2026-02-03: Fix build failure with OpenSSL 3.4.3+ due to deprecated ENGINE API * 2026-02-03: Codex/add documentation for pcre matching (#6509) * 2026-02-02: runtime: include IPv6 scope id in DNS cache keys * 2026-02-01: ossl: make OCSP requests non-blocking with caching * 2026-01-31: runtime: fix srUtilItoA() data type inconsistencies * 2026-01-31: impstats: add VictoriaMetrics push via Remote Write * 2026-01-30: stream: lock open/init and defer error log * 2026-01-30: runtime: call class exit on lib unload * 2026-01-30: nsd_ossl: abort failed handshakes * 2026-01-29: runtime: clarify atomic helper usage * 2026-01-29: queue: fix slow drain of disk-assisted queues * 2026-01-29: queue: fix DA worker infinite loop regression from commit 4748c5746 * 2026-01-29: imkafka: add JSON batch splitting for Azure Event Hub * 2026-01-29: fix(obj): use best-effort atomics for ifIsLoaded to eliminate TSAN warnings * 2026-01-28: omfile: pass size-limit file to rotate cmd * 2026-01-28: configure: fix xxhash library check missing error action * 2026-01-25: imtcp: add MultiLine and regex framing support * 2026-01-25: SQUASH: some fixes * 2026-01-24: template: add omitIfZero option to property() * 2026-01-24: agent/skills: standardize test registration and mock check * 2026-01-23: tools: honor main_queue name override * 2026-01-23: skills: implement extended documentation distribution check * 2026-01-23: fix(tools): graceful exit on recvfrom error in wait_timeout * 2026-01-23: doc: refine memory auditor guidelines with CHKmalloc and NULL checks * 2026-01-23: core: streamline agent instructions with modular skills * 2026-01-23: action: add batchesprocessed pstats counter * 2026-01-22: imfile: add inode generation check for file rotation detection * 2026-01-21: sidecar: add rsyslog impstats exporter * 2026-01-19: ossl: add OCSP certificate revocation checking support * 2026-01-17: nitfix: add output files to .gitignore * 2026-01-17: imfile: add inotify fallback rescans on watch limits * 2026-01-17: doc: add imfile new parameter doc * 2026-01-16: queue: harden disk recovery after invalid .qi * 2026-01-16: core: fsync+atomic rename for pid file; abort on failure * 2026-01-16: build: move doc EXTRA_DIST into doc/Makefile.am * 2026-01-15: mmanon: add retry limit + fallback for unique randomization (#6444) * 2026-01-14: Improve test infrastructure: fix core dump race condition * 2026-01-13: fix pmlastmsg.c typo error * 2026-01-13: docs: Add Core Philosophy page * 2026-01-13: doc: deprecate omruleset; add call migration guide * 2026-01-12: rainerscript: add is_in_subnet() built-in * 2026-01-12: omhiredis: remove unneded param name from param table * 2026-01-12: omfile: fix pszSizeLimitCmd leak; own copy from outchannel * 2026-01-12: nitfix: code style * 2026-01-12: imfile: guard statefile unlink and honor RMStateOnMove * 2026-01-12: doc: imhttp: document ability to bind to specific IP addresses * 2026-01-12: doc: add FAQ about blocking actions and queues * 2026-01-12: core: make action state changes output better debug info * 2026-01-09: action: guard worker instance check on non-atomic builds * 2026-01-09: Fix: Use __has_include to check for rabbitmq-c headers * 2026-01-09: Fix imjournal test race condition with parallel execution * 2026-01-08: contrib/imczmq,omczmq: add CZMQ 4.2+ version guards * 2026-01-07: runtime: fix race condition in worker thread cancellation * 2026-01-07: runtime: fix inconsistent synchronization of iCurNumWrkThrd * 2026-01-07: runtime: fix TOCTOU race in worker thread creation * 2026-01-07: omsnmp: fix legacy config path and session strings * 2026-01-06: runtime: fix race condition in worker thread startup * 2026-01-06: runtime: fix critical data race in wtpSetState() * 2026-01-06: lmsig_ksi: remove unused REPORT_PARAM_MISSING macro * 2026-01-06: Fix mmsnareparse test data files missing in make dist * 2026-01-05: tcpflood: nitfix w/ compiler warning when DTLS is not configured * 2026-01-05: rainerscript: add split() function * 2026-01-05: doc: optimize agent build instructions for efficiency * 2026-01-05: doc: add sparseArray lookup IPv4 subnet matching example * 2026-01-05: core/AIX: fix an hard exit() on certain failure at AIX * 2026-01-05: Refactor duplicate string copy logic in msg.c * 2026-01-05: Refactor Prometheus stats generation to a separate function * 2026-01-04: queue: re-implement queue size warnings * 2026-01-04: doc: imrelp: clarify missing MaxSessions and session stats (#6414) * 2026-01-03: runtime/ratelimit: annotate ratelimit nonnull contracts * 2026-01-02: tcpsrv: restore default stack size assignment * 2026-01-02: runtime/nsd_ossl.c: fix authmode authorization bypass * 2026-01-02: integer parsing more robust * 2026-01-01: core, runtime, omfwd: plumb action name into modules and logs * 2025-12-31: core: improve some important inline documentation * 2025-12-30: omelasticsearch fix: potential NULL dereference * 2025-12-30: msg, docs: document jsonMerge overwrite; drop TODO * 2025-12-30: imjournal: make PRIORITY parsing robust and quiet * 2025-12-29: ratelimit: add named policies; wire into imtcp/imptcp * 2025-12-29: docs: add module template and tighten RST AI authoring rules * 2025-12-29: build: add missing doc files to EXTRA_DIST * 2025-12-28: ossl: fix ctx double-free and config string leaks * 2025-12-28: omkafka fix: double-free of kafkaheader if used * 2025-12-28: imjournal: remove unused ctrPollFailed * 2025-12-27: Add rsyslog-doc AI assistant prompt and update meta-docs * 2025-12-26: Update tests/omfwd_rebind_udp.sh * 2025-12-25: runtime/rsksi: check KSI_DataHash_extract return values * 2025-12-25: Architectural Analysis of Rsyslog Core (#6390) * 2025-12-24: rainerscript: ensure parse_json consumes entire input string * 2025-12-24: rainerscript: add split() function * 2025-12-24: omfwd: fix RebindInterval suspension and improve UDP cleanup * 2025-12-24: docs: refactor AGENTS.md for agent clarity, safety, and precision * 2025-12-23: rainerscript: ensure parse_json consumes entire input string * 2025-12-23: fix improper ":json:" use * 2025-12-23: doc: fix version (accidentally not updated) * 2025-12-23: Update doc/source/reference/parameters/omudpspoof-template.rst * 2025-12-22: nitfix: code style violations * 2025-12-22: netstream ossl driver: small fix in meta information * 2025-12-22: doc: add RAG Knowledge Base extraction and build integration * 2025-12-21: docs: formalize defensive coding and assertion patterns * 2025-12-21: doc: modernize and expand queue concept documentation * 2025-12-21: doc: fix missing EXTRA_DIST entry * 2025-12-19: rsyslog-ossl: Prevent double close of socket fd * 2025-12-19: impstats: add log.file.overwrite parameter for atomic overwrites * 2025-12-19: doc: update agent guidelines to require documentation for new parameters * 2025-12-17: omudpspoof: update RainerScript examples * 2025-12-17: imjournal: fix potential segfault (SIGBUS) * 2025-12-17: doc: fix RST syntax errors in parameter documentation * 2025-12-17: Remove macos-13 from CI and weekly jobs * 2025-12-17: Fix doc build CI security, spelling, and RST build errors * 2025-12-16: omudpspoof: fix module template example * 2025-12-16: Refactor: rename omotlp module to omotel * 2025-12-15: doc: unify mmanon random-consistent-unique text * 2025-12-15: Add support healthchecktimedelay into omhttp * 2025-12-11: omudpspoof: split parameter docs into reference pages * 2025-12-11: omudpspoof: correct parameter scopes in references * 2025-12-11: omudpspoof: align parameter casing with camelCase guidance * 2025-12-11: omsnmp: align parameter heading with module scope (#6354) * 2025-12-11: Codex/refactor rsyslog parameter documentation n6uh16 (#6345) * 2025-12-11: Codex/refactor module parameter documentation atexhg (#6355) * 2025-12-11: Codex/refactor module parameter documentation (#6349) * 2025-12-11: Codex/refactor module documentation into parameter files (#6348) * 2025-12-05: prepare for next daily stable cycle * 2025-12-05: omdtls: fix incorrect usage of gai_strerror * 2025-12-05: mmjsontransform: fix compiler warning * 2025-12-05: core: fix LogError(0, ...) anti-pattern and add guidelines * 2025-12-05: build: fix missing test files in dist tarball * 2025-12-04: omhiredis: Allow to define a name to instance and use it in logs * 2025-12-04: doc: fix some small glitches * 2025-12-03: packaging/docker: add TLS support to collector image * 2025-12-03: mmanon: better document externalized function part * 2025-12-03: docs: clarify coding practices path in prompts * 2025-12-03: docs: add assert-plus-fallback helper guidance * 2025-12-03: docker/collector: always load imtcp module * 2025-12-03: doc: handle backslash continuations in rsyslog lexer * 2025-12-03: doc: add contract pattern for externalized helpers * 2025-12-02: mmanon: fix spacing for format * 2025-12-02: doc: fix omlibdbi parameter examples * 2025-12-02: New functionality for omuxsock (#5630) * 2025-12-01: omuxsock documentation changes * 2025-12-01: mmanon: tidy inline comments * 2025-12-01: imtcp: add NetworkNamespace * 2025-12-01: Codex/refactor rsyslog parameter documentation 8z2p3x (#6327) * 2025-11-30: omfwd: add DNS SRV discovery (targetSrv) * 2025-11-28: feat(deploy): add ROSI Collector centralized log collection stack * 2025-11-28: Codex/refactor rsyslog parameter documentation (omjournal) (#6309) * 2025-11-26: doc: add TLS example for omelasticsearch * 2025-11-25: mmsnareparse: make regex trailing search limit configurable * 2025-11-25: mmanon: fix races in IPv4 trie and IPv6 hash access (#6315) * 2025-11-25: doc: add SETUP, BUILD, TEST agent task keywords * 2025-11-25: Codex/refactor rsyslog module parameter documentation wnkysy (#6311) * 2025-11-24: mmsnareparse: add parameter ignoreTrailingPattern.regex * 2025-11-21: mmsnareparse: add ignoreTrailingPattern parameter * 2025-11-21: build: Add code coverage targets * 2025-11-18: doc: some nitfixes to historical doc * 2025-11-18: doc: add conceptual model summaries * 2025-11-18: Codex/refactor omdtls documentation for parameters (#6298) * 2025-11-17: mmsnareparse: add Sysmon event support via JSON definition file * 2025-11-17: doc: add json-ld (basic schema) (#6303) * 2025-11-14: doc: restructure and modernize project history; add origins page and xrefs * 2025-11-14: container: add libyaml to some dev containers * 2025-11-14: Fix: Remove stray/unwanted 'rsyslog' subproject * 2025-11-14: Codex/refactor rsyslog module documentation parameters (#6296) * 2025-11-12: omhttp - Add two profile for Splunk HEC (#6150) * 2025-11-12: fix codestyle issue (minor) * 2025-11-12: Codex/refactor rsyslog parameter documentation fvn43p (#6290) * 2025-11-12: Codex/refactor rsyslog module parameter documentation omgssapi (#6294) * 2025-11-09: doc: add FAQ if rsyslog runs on windows * 2025-11-07: Implement Kafka Metrics, new pstats format (#6154) * 2025-11-06: fix typo in European mirror link (https vs. http) * 2025-11-06: doc: clarify release channels in versioning guide (#6289) * 2025-11-05: doc: add release version number semantic info (#6286) * 2025-11-05: Codex/refactor rsyslog module parameter documentation s7jgy3 (#6277) * 2025-11-05: Codex/refactor rsyslog module parameter documentation p47sz4 (#6285) * 2025-11-05: Codex/refactor rsyslog module parameter documentation khpye2 (#6276) * 2025-11-05: Codex/refactor rsyslog module parameter documentation bn356b (#6287) * 2025-11-05: Codex/refactor rsyslog module documentation b6q3fv (#6281) * 2025-11-04: feat(imhiredis): Add support for TLS in imhiredis (#21) * 2025-11-03: nsd_gtls: fix repeated warnings on connection retry + test * 2025-11-03: content_count_check: use optional file argument if provided * 2025-11-03: README.md Updates for clarity and content (#6282) * 2025-11-03: Enhance README with Table of Contents and new sections (#6283) * 2025-10-31: tcpsrv: stop workers before destruction * 2025-10-31: PoC: rsyslog ETL pipeline container for sending to vespa.ai * 2025-10-30: omhttp - Stats by destination server (#6141) * 2025-10-30: Fix typos: corrected 'intial' to 'initial' and 'intialize' to 'initialize' * 2025-10-30: Codex/refactor rsyslog module parameter documentation rgp0jv (#6256) * 2025-10-30: Codex/refactor module name parameters documentation (#6250) * 2025-10-30: Add support for TLS in omhiredis (#17) * 2025-10-29: omelasticsearch: add apikey authentication * 2025-10-29: doc: fix trailing whitespace in man pages * 2025-10-29: doc: add faq entry for rsyslog as etl tool (#6272) * 2025-10-29: doc: add FAQ for sending data to vespa.ai * 2025-10-24: doc/build: ship vendor/tools; make sitemap opt-in * 2025-10-24: action.c: reordered actionDestruc * 2025-10-23: doc: enable sphinx sitemap generation for html output * 2025-10-22: doc: vendor mermaid assets and fix offline viewing * 2025-10-22: doc: update SIGINT signal documentation in man page * 2025-10-20: doc: make git optional for Sphinx builds (dist tarballs) * 2025-10-20: doc: enable parallel Sphinx builds; silence edit_on_github * 2025-10-17: Add doc for mbedtls driver * 2025-10-15: bump version number for 8.2512 series * 2025-10-15: Doc: Minor spelling and typing mistakes (#6242) * 2025-10-15: Codex/refactor rsyslog imklog module parameter documentation (#6246) * 2025-10-13: Codex/refactor parameter documentation for imkafka (#6243) * 2025-10-11: core: stop busy-loop when action disables itself * 2025-10-11: Add MbedTLS netstream driver. * 2025-10-10: Codex/refactor rsyslog imgssapi module parameter documentation (#6239) * 2025-10-10: Codex/refactor rsyslog imdiag module parameter documentation (#6235) * 2025-10-09: prepare for 8.2510.0 scheduled stable release * 2025-10-09: ossl bugfix: ensure peer cert is freed in osslChkPeerAuth * 2025-10-09: omotlp: introduce OTLP/HTTP log exporter * 2025-10-07: mysql: stabilize async ommysql workers via proper thread init * 2025-10-07: imptcp: fix null pointer dereference in error logging * 2025-10-07: docs: add Agent Chat Keywords to AGENTS.md * 2025-10-06: feat: Trigger macOS workflow on relevant file changes * 2025-10-06: doc: im prove log pipeline documentation * 2025-10-06: doc: clarify reliable forwarding examples * 2025-10-06: Fix: Make RSYSLOG_DYNNAME generation POSIX-compliant * 2025-10-05: doc: refresh database and PRI tutorials * 2025-10-05: doc: improve mmjsonparse documentation * 2025-10-05: Codex/refactor rsyslog parameter documentation 68okf4 (#6219) * 2025-10-04: mmjsonparse: add find-json mode for embedded JSON * 2025-10-04: Codex/refactor rsyslog module documentation (#6215) * 2025-10-04: CI,DIST: build docs from 'make dist' tarball * 2025-10-02: test: Enable Valgrind for manytcp-too-few-tls-vg.sh * 2025-10-02: Increase message loss tolerance in TargetFail test * 2025-10-01: template: fix lenStr for subtree rendering * 2025-10-01: mmjsontransform: add experimental JSON dotted-key (un)flatten * 2025-09-29: omkafka: restore producev fallback for older librdkafka * 2025-09-29: omelasticsearch: implement target platform check (#6197) * 2025-09-29: mmexternal: split parameter in doc (#6193) * 2025-09-29: imtcp: Improve peer logging to include source ports (#6198) * 2025-09-29: CI containers: include mbedtls test environment * 2025-09-28: imdiag/tests/docs: use RFC5737 test IP in samples * 2025-09-28: Codex/refactor parameter documentation for mmjsonparse (#6189) * 2025-09-27: doc: split property documentation into separate files * 2025-09-26: docs: add agent guides and module metadata scaffolding * 2025-09-26: mmanon: split parameter docs into reference * 2025-09-25: omelasticsearch: omit _type by default; use typeless endpoint * 2025-09-25: doc: update imjournal journald warning * 2025-09-24: template: add jsonftree option for nested jsonf output * 2025-09-24: mmfields: split parameter docs into reference pages * 2025-09-23: omusrmsg bugfix: potential null pointer dereference causes segfault * 2025-09-23: omfile: enable addLF by default * 2025-09-23: mmsnarewinsec: comprehensive Windows Security Event Log parser * 2025-09-23: doc: improve subtree, list template documentation * 2025-09-23: doc: further improve template doc * 2025-09-23: Update doc/source/reference/templates/templates-type-list.rst * 2025-09-23: Codex/refactor module documentation for mmdblookup * 2025-09-22: omfile: add addLF option to append newline (#6165) * 2025-09-22: Codex/refactor rsyslog parameter documentation inmmexternal * 2025-09-22: Codex/document mmaudit plugin with sphinx (#6167) * 2025-09-20: tests/omelasticsearch: align suite with ES 7.14, reduce flakiness * 2025-09-19: refactor rsyslog parameter documentation mmdarwin * 2025-09-19: refactor rsyslog parameter documentation mmcount * 2025-09-19: refactor rsyslog module parameter documentation mmaitag * 2025-09-18: omazureeventhubs: fix data races and suppressions * 2025-09-18: mmleefparse: new message modification module for LEEF format * 2025-09-17: doc: Add helper scripts to build documentation * 2025-09-17: * imtcp: warn on TLS handshakes received on plain listeners * 2025-09-16: refactor rsyslog parameter documentation mmutf8fix * 2025-09-15: fix config error on systems with pkg-config but not libgcrypt-config * 2025-09-15: docs/getting_started: add AI assistants page * 2025-09-15: doc: new beginner tutorials * 2025-09-15: dev container: do not work-around libgcrypt dev interface change * 2025-09-13: doc: describe regex lookup table type * 2025-09-13: Codex/refactor rsyslog parameter documentation for mmtaghostname * 2025-09-12: logctl tool: fix mongoc.h include location * 2025-09-12: docs: fix doc build instructions (Sphinx 4.5+, main, monorepo) (#6114) * 2025-09-12: docker: fix collector, udp and tcp could not be enabled individually * 2025-09-12: docker: enhancements to debian sid and ubuntu 24.04 dev container * 2025-09-12: docker: add relp listener to rsyslog "collector" * 2025-09-12: doc: document compactjsonstring global option (#6127) * 2025-09-12: doc: better doc for rsyslog collector container * 2025-09-12: core: add doxygen comments to errmsg object * 2025-09-11: refactor rsyslog module parameter documentation for mmsnmptrapd * 2025-09-11: net: Add NetworkNamespace APIs * 2025-09-11: imtcp support for NetworkNamespace * 2026-02-16: prepare for 8.2602.0 scheduled stable release * 2025-09-10: tls: process TLS 1.3 KeyUpdate during send (ossl/gtls) * 2025-09-10: improve original patch * 2025-09-10: docker: update Debian 13 build to inlcude more modules * 2025-09-10: doc: improg had a strangely worded limitation listed - corrected (#6115) * 2025-09-10: Update doc/README.md * 2025-09-09: doc: update reference section on doc structure * 2025-09-09: core: add setting to permit compact json format * 2025-09-09: Codex/refactor rsyslog module parameter documentation mmrfc5424addhmac * 2025-09-09: CI remove old kafka codecov builder now the new one is present * 2025-09-06: doc: document git path resolution * 2025-09-06: devtools: Specify usage of clang-format-18 to pin v18 * 2025-09-05: rainerscript: add toupper() function * 2025-09-05: misc: add void parameter lists * 2025-09-05: doc: restore missing doc files in configure.ac * 2025-09-04: imhttp: guard handler registration * 2025-09-04: devtools: use codecov uploader in CI script * 2025-09-04: config script: add b64_decode function * 2025-09-04: Update devtools/run-ci.sh * 2025-09-04: Codex/refactor rsyslog parameter documentation ejsnoq (#6085) * 2025-09-03: runtime: fix Darwin build regressions and improve BSD portability * 2025-09-03: omkafka: allow sending static headers * 2025-09-03: mmpstrucdata: split parameter docs into reference pages * 2025-09-03: mmpstrucdata: fix action parameter anchors and casing * 2025-09-03: imdocker: Add image name to metadata fields * 2025-09-03: code style: fix macro formatting * 2025-09-03: ci(docs): add PR preview workflow via Actions Pages * 2025-09-03: Implement omhttp batching and performance improvements * 2025-09-03: Codex/refactor rsyslog parameter documentation (#6074) * 2025-09-02: omsnmp: restructure (#6063) * 2025-09-02: imrelp: fix potential segfault on termination (#5600) * 2025-09-02: core: add fromhost-port message property * 2025-08-28: tools/rsyslog.conf.5: fix example Port= value * 2025-08-28: rainerscript: warn on excessive random range * 2025-08-28: queue: refactor batch deletion with explicit phases (#6013) * 2025-08-28: omsendertrack: "fix" static analyzer reported issue * 2025-08-28: doc: work around a spellcheck restriction * 2025-08-28: doc: note AI authorship\n\nAI-Agent: ChatGPT * 2025-08-28: core: some code cleanup * 2025-08-28: community: disable automatic welcome action * 2025-08-28: code cleanup (rephrasing false postive commented out code) * 2025-08-27: improve PR welcome message handling * 2025-08-27: docs: fix typo ('begin' -> 'beginning') in developer documentation (#6029) * 2025-08-27: docs: fix minor typos in docs/source (#6028) * 2025-08-27: doc: fix assorted typos across documentation * 2025-08-27: debug version of welcome script * 2025-08-27: community: some fixes to "welcome" helper action * 2025-08-27: community: add welcome message to first few commits (#6032) * 2025-08-27: codeql: fix "master" branch reference * 2025-08-27: Potential fix for code scanning alert no. 44: Commented-out code * 2025-08-27: Add actions analysis * 2025-08-26: prepare for next scheduled stable release cycle * 2025-08-26: docs: add rsyslog issue assistant build files (#6026) * 2025-08-26: dev doc: mention "good first issue" dashboard * 2025-08-26: Update README.md * 2025-08-25: prepare for daily stable 8.2508.0 release * 2025-08-25: fix: doc/ not in tarball (in progress) * 2025-08-25: doc: add code of conduct * 2025-08-24: omrelp: add TCP keepalive configuration * 2025-08-23: immark: document config cleanup * 2025-08-23: imdocker: free temp buffer after log option parse * 2025-08-22: tcpsrv: revert PR 5806 because it was ineffective * 2025-08-22: tcpsrv: refactor IO loop; rearm-before-unlock; poll path * 2025-08-22: imjournal: initialize instance fields to avoid invalid free * 2025-08-22: imdocker: fix cosmetic memory leak * 2025-08-21: runtime/tcpsrv: drop obsolete inQueue handling * 2025-08-21: omhttp: guard rest path template access * 2025-08-21: mmaitag: fix potential memory leak * 2025-08-21: doc: restructure templates docs into hub and refs * 2025-08-21: doc: restore property statement context * 2025-08-21: core: code cleanup, avoid dead assignment * 2025-08-21: core/nsd_ptcp: zero addr before getpeername() * 2025-08-20: tcpsrv: stop loop after closeSess to avoid use-after-free * 2025-08-20: omprog: split parameter docs into reference pages * 2025-08-20: omfwd: document and enforce pool-level suspend semantics * 2025-08-20: Update README.md - notification channels * 2025-08-20: Update .github/instructions/modules.plugins.instructions.md * 2025-08-19: imhttp: optional auth + Content-Length for metrics/health * 2025-08-19: doc: make AI-First concrete; add guardrails and CI proof * 2025-08-19: atomic: remove trailing semicolons from helper macros * 2025-08-18: template: fix missing lenStr in subtree templates * 2025-08-18: tcpflood: omit delimiter for octet frames * 2025-08-18: serialize TLS session setup to avoid data race * 2025-08-18: runtime: fix NetstreamDriverCAExtraFiles parsing * 2025-08-18: omsendertrack: stop towards full completion of module. * 2025-08-18: omhttp: add profile support and revise HTTP retry semantics * 2025-08-18: imuxsock: tidy parameter docs and links * 2025-08-18: imuxsock: split input parameter docs into reference pages * 2025-08-18: imptcp: split parameter docs into reference pages * 2025-08-18: docs: streamline contrib templates and commit guidance * 2025-08-18: docs: split imfile module parameters (#5941) * 2025-08-18: doc/imfile: add File and Tag to parameter samples * 2025-08-18: OMHIREDIS: supported UDS redis server address * 2025-08-17: ommongodb: fix compilation of SSL/TLS support * 2025-08-17: ommongodb: add support for mongo-c-driver v2 * 2025-08-17: docs: rewrite container section with current images * 2025-08-17: doc: add per-container docker pages with env defaults (#5960) * 2025-08-16: imjournal: fix double sd_journal_close() during thread cancellation * 2025-08-16: doc: warn against unofficial and outdated doc clones * 2025-08-16: doc: set html_baseurl to emit canonical tags * 2025-08-16: Update doc/source/conf.py * 2025-08-15: omhttp: migrate to OMODTX; prep for project-supported status * 2025-08-15: imtcp: split input parameter docs into reference pages * 2025-08-15: imtcp: fix parameter scopes and add input examples * 2025-08-15: doc: omkafka SASL-from-env example + backticks doc overhaul * 2025-08-15: Update tests/omprog-feedback.sh * 2025-08-15: Fix transaction suspension handling for issue #2420 * 2025-08-14: ommysql: remove long-standing non-needed TODO item * 2025-08-14: imfile: add per-file impstats counters and tests * 2025-08-14: doc: split imudp parameter docs * 2025-08-13: ommysql: drop global rwlock_hmysql, revert a3b2983 * 2025-08-13: docs: split pmrfc3164 parameters into structured reference pages * 2025-08-13: docs: split omelasticsearch parameters into dedicated reference pages * 2025-08-13: docs: split imjournal parameter docs into dedicated reference pages * 2025-08-13: doc: increase visibility of reverse DNS cache controls * 2025-08-13: doc: clarify reverse DNS cache scope * 2025-08-13: doc: add v8 locking note * 2025-08-13: chore: document AI-generated changes * 2025-08-12: doc: update to doc (improvement) strategy * 2025-08-12: doc: reference AI module map in AGENTS.md and DEVELOPING.md * 2025-08-12: doc: refactor imdocker module param docs into structured ref pages * 2025-08-12: doc: imdocker had invalid legacy config stmt info - removed * 2025-08-11: omazureeventhubs: add Doxygen docs for proton thread and flow (NFC) * 2025-08-11: omamqp1: resize buffer via realloc with error handling * 2025-08-11: docs: add developer page "Action Threads and Queue Engine" * 2025-08-04: omazurevenethubs: fix compiler warning * 2025-08-01: omysql: better doc to clarify mutex use * 2025-08-01: core: migrate callback invocations to type-safe signatures * 2025-08-01: Fix: Remove unsafe function pointer casting in cfsysline.c * 2025-07-31: doc fix: remove doc for debug options that no longer exits * 2025-07-31: core: improve inline code doc for action.[ch] * 2025-07-30: parser: add checkParserInst hook for pre-registration validation * 2025-07-30: doc: improve "AI First" coverage in about section * 2025-07-28: ossl: Add PrioritizeSAN option to OpenSSL network stream driver * 2025-07-28: imjournal: fix vulnerability in state file creation * 2025-07-28: gtls: log missing certificate/key only once * 2025-07-27: doc: Improve omfwd module documentation * 2025-07-27: doc(omfwd): split and restructure omfwd documentation * 2025-07-25: document [io]mczmq modules * 2025-07-25: doc: add an initial "about" section * 2025-07-25: Add Doxygen comments for czmq modules (#5865) * 2025-07-24: Add sphinxcontrib-mermaid to documentation Docker image * 2025-07-22: docs: add structured beginner guide under getting_started/ * 2025-07-22: doc: introduce mermaid diagrams and modernized configuration docs * 2025-07-21: doc: major restructure and content improvements * 2025-07-21: doc: fix legacy conf where modern should be * 2025-07-21: Add furo theme for sphinx * 2025-07-20: doc: add json targets * 2025-07-20: doc: Modernize documentation and tooling * 2025-07-20: Add documentation build workflow * 2025-07-20: Add doc build workflow for PRs * 2025-07-20: Add Apache License to documentation * 2025-07-19: doc: some cleanup and naming changes * 2025-07-19: doc: omit footer in singlehtml builds by default * 2025-07-18: rainerscript: backticks support ${VAR} and adjacent text * 2025-07-18: pmrfc3164: add headerless message detection and handling * 2025-07-18: doc: restore control flow notes * 2025-07-18: doc: clarify action flow and add test requirement * 2025-07-18: Correct connection timing computation * 2025-07-17: fix: readthedocs definitions * 2025-07-17: doc: provide strategy and implementation document * 2025-07-17: doc: fix "edit on github" repo link * 2025-07-17: doc: enable readthedocs.io support * 2025-07-16: style: reformat Config Settings block with Doxygen comments * 2025-07-16: style: normalize C source formatting via clang-format (PoC) * 2025-07-16: omelasticsearch fix: Handle HTTP 401/403 auth errors * 2025-07-16: fix mmaitag provider handling and memory safety * 2025-07-16: cleanup: remove code-style tools that are no longer neeed * 2025-07-16: cleanup: fix reference to "master" branch -> now "main" * 2025-07-16: chore: add project-wide formatting and editor configs * 2025-07-16: Fix race condition in imtcp when closing sessions * 2025-07-16: Add IP address SAN support * 2025-07-15: fix: Prevent redefinition warnings for syslog macros * 2025-07-15: feat: introduce mmaitag PoC with Gemini AI provider (#5754) * 2025-07-15: doc: add FAQ with commonly misunderstood config sequences * 2025-07-15: build: mmaitag in configure disabled by default (#5797) * 2025-07-15: build: adjust version tag used for daily stable build process * 2025-07-15: Investigate and resolve rsyslog issue 2693 (#5793) * 2025-07-14: refactor: modernize macro definitions to support formatting and clarity * 2025-07-14: docs: Fix minor typos * 2025-07-13: impstats: add support for Prometheus metrics output format * 2025-07-12: docker: reflect new state of repo * 2025-07-12: doc: document gtls intermediate cert chain * 2025-07-12: doc: clarify purpose of MsgSetRawMsg side effects * 2025-07-12: dev doc: add design notes to queue subsystem files * 2025-07-12: Improve TLS handshake error logging (#5762) * 2025-07-12: Document statsobj architecture and formats * 2025-07-11: tooling: new developer tool to fix trailing spaces * 2025-07-11: Fix unsafe sprintf use in Azure event hubs module (#5687) * 2025-07-10: update README.md - add new AI "rsyslog Assistant" link * 2025-07-08: Document native message modification plugin interface (#5757) * 2025-07-08: AI tools: Add directory for future AI/ML tooling (#5758) * 2025-07-06: scripting: add endswith operator to property filters and RainerScript * 2025-07-06: nsd_ptcp fix: misleading error messages (regression from ad1fd21) * 2025-07-06: imtcp: prevent double-enqueue of descriptors via inQueue flag * 2025-07-06: imkmsg fix: Handle EAGAIN/EWOULDBLOCK check portably * 2025-07-05: helper utils: clean up python indentation * 2025-07-04: imfile: add new module/input parameter deleteStateOnFileMove * 2025-06-20: imfile: some cleanup, no functional changes * 2025-06-20: fix off-by-one buffer overflow * 2025-06-19: tcpsrv cleanup: remove TODO line that was scheduled to be removed * 2025-06-18: tcpsrv: fail to remove already-removed epoll fd is no error * 2025-06-18: official containers: bump rsyslog release nbr for next cycle * 2025-06-17: omsendertrack fix: memory leak in initHashTable * 2025-06-17: net_ossl: Fix memleak in net_ossl_peerfingerprint * 2025-06-17: doc: first omsendertrack reference manual entry * 2025-06-17: Bump tj-actions/changed-files from 4 to 46 in /.github/workflows * 2025-06-17: Add omsendertrack statefile tests (#5716) * 2025-06-15: update developer doc to point to new rsyslog-doc location * 2025-06-15: docs: document proof-of-concept status * 2025-06-15: doc: fix some nits, especially in the faq section * 2025-06-15: doc: add lexer for rsyslog config language * 2025-06-15: cleanup: fix some TODOs and remove outdated ones * 2025-06-15: Fix: Correct documentation location and update build guidance * 2025-06-14: doc: improve description of config parameter block handling * 2025-06-14: doc: add doxygen comments to runtime header * 2025-06-13: omfile: update internal doc to doxyfile format and improve it * 2025-06-13: docs: add commenting style guide and reference * 2025-06-13: add new FAQ on udp reception troubleshooting * 2025-06-13: Use RGerhards name in omusrmsg header * 2025-06-12: ossl netstream driver: do not import engines if not available (#5685) * 2025-06-12: Removed the redundant *_la_LDFLAGS * 2025-06-11: Add Makefile for Sphinx documentation * 2025-06-10: prepare scheduled stable version 8.2506.0 * 2025-06-10: omusrmsg: use utmpx on systems where available * 2025-06-10: imtcp: avoid data race in notifyReArm * 2025-06-10: fix hashtable realloc memset range * 2025-06-09: Revert "queue: emit better warning messages on queue param mismatch" * 2025-06-08: omfwd regression fix: avoid false active target change log message * 2025-06-08: lookup: add new table type for regex-matches * 2025-06-08: imdocker: harden module buffer management * 2025-06-08: clarify pselect suppression * 2025-06-07: doc: document optional module dependencies * 2025-06-07: Add optional PCRE match module * 2025-06-06: fix stringop-overread warning in omusrmsg * 2025-06-06: fix im3195 doc * 2025-06-06: docs: unify AI commit instructions and improve setup notes * 2025-06-06: docs: restructure contributor docs for clarity and AI agent readiness * 2025-06-05: update README to convey new developments in this project * 2025-06-05: fix mime type typo * 2025-06-05: docs: clarify CI image size * 2025-06-05: Update README to mirror new project organization * 2025-06-05: STEP: interim new "production" docker container set * 2025-06-05: Add README files for standard, dockerlogs, and host * 2025-06-04: stats: add prometheus format to set of supported output formats * 2025-06-04: imhttp: add simple http health check functionality * 2025-06-04: hostname setting works * 2025-06-04: Fix comment for parsSkipWhitespace * 2025-05-23: imudp: Output errno after recvmmsg call * 2025-05-15: imjournal: delete redundant lines in imklog.c * 2025-05-12: netstrm: optimized interface for passing connection err info * 2025-05-08: tls subsystem: generate better error message on accept failure * 2025-04-24: tcpsrv: ensure thread name set via pthread is max 15 char * 2025-04-24: ossl tls driver: better error reporting * 2025-04-18: gnutls netstrm drvr fix: handle write retry correctly in recv call * 2025-04-17: tcpsrv bugfix: do not busy wait on io events * 2025-04-16: tcpsrv bugfix: input name was not properly propagated * 2025-04-16: add experimental stats for worker awaking via event notification * 2025-04-15: tcpsrv: fix non-maintained stats counter "run" * 2025-03-25: Feature: #define macro creation for journald namespace function. * 2025-03-22: omjournal: Fix priority value. * 2025-03-22: Feature: Add journald namespace feature to omjournal. * 2025-03-17: imuxsock: Add statistics counter for discarded messages * 2025-03-14: cosmetic: remove clang static analyzer false positive * 2025-03-06: omsendertrack: new module * 2025-03-06: Fix a buffer overflow when the argument to replace is empty * 2025-03-05: rsyslog startup bugfix: cosmetic memory leak * 2025-03-05: gnutls TLS driver: fix small memory leak * 2025-03-05: core: fix potential misadressing in sigmask * 2025-03-03: Update man page dates * 2025-03-01: omhttp: fix handling of httpProxy variable * 2025-02-28: "fix" clang 18 static analyzer false positives * 2025-02-27: queue: emit better warning messages on queue param mismatch * 2025-02-26: core: fix potential NULL ptr access on HUP in very early startup phase * 2025-02-21: bump version number for next scheduled stable cycle * 2025-02-20: Fix typo in debug printf of ommysql

References: https://www.suse.com/support/update/announcement/2026/suse-su-202624598-1/, https://bugzilla.suse.com/1257604, https://bugzilla.suse.com/1271910, https://bugzilla.suse.com/1272414, https://bugzilla.suse.com/1274610, https://bugzilla.suse.com/1275926, https://bugzilla.suse.com/1281628, https://bugzilla.suse.com/1285036, https://bugzilla.suse.com/1286162, https://bugzilla.suse.com/1286926, https://www.suse.com/security/cve/CVE-2026-19654, https://www.suse.com/security/cve/CVE-2026-61548, https://www.suse.com/security/cve/CVE-2026-78002, https://www.suse.com/security/cve/CVE-2026-92709