Debian Patches

Status for rsyslog/8.2504.0-1+deb13u2

Patch Description Author Forwarded Bugs Origin Last update
Don-t-create-a-database.patch Don't create a database
dbconfig-common, which is used by rsyslog-mysql and rsyslog-pgsql, takes
care of creating the database for us.		 Michael Biebl <biebl@debian.org> no 2014-03-13
Increase-timeouts-in-imfile-basic-2GB-file-and-imfile-tru.patch Increase timeouts in imfile-basic-2GB-file and imfile-truncate-2GB-file

Those tests can take a long time, especially on slow architectures like
armhf, so bump the test timeouts considerably.		 Michael Biebl <biebl@debian.org> no 2020-02-28
Revert-queue-emit-better-warning-messages-on-queue-param-.patch Revert "queue: emit better warning messages on queue param mismatch"
This reverts commit 525a6f1bbf6f330169bfe506bfd898e7aa7b871f.		 Michael Biebl <biebl@debian.org> no 2025-04-30
omfwd-regression-fix-avoid-false-active-target-change-log.patch omfwd regression fix: avoid false active target change log message
Commit ffaf6dc4620da added proper variable sync, but dropped the check
if active count had actually changed. As such, the output was always
generated, which could pollute the log heavily.

Code style fixes where dropped for the backport.

(cherry picked from commit d6d340aaad6ea414a2fd4cf07d3f98c5c9334194)		 Rainer Gerhards <rgerhards@adiscon.com> no 2025-06-08
imptcp-guard-regex-framing-match-at-line-start.patch imptcp: guard regex framing match at line start
Why
A regex match at the beginning of the receive buffer can form a
negative message length after oversize-frame recovery.

Impact
Regex-framed imptcp listeners reject that invalid transition instead
of submitting a negative message length.

Before/After

Technical Overview
Mirror the line-offset guard used by the shared imtcp parser.
Leave existing regex framing and oversize recovery behavior unchanged.

Security advisory:
https://github.com/rsyslog/rsyslog/security/advisories/GHSA-cj5r-wh2m-7w29

With the help of AI-Agents: Codex

(cherry picked from commit 07b3c40a5a78c79ed9109251f842ca7e955dd586)		 Rainer Gerhards <rgerhards@adiscon.com> no 2026-07-20
rainerscript-align-replace-sizing-rewind.patch rainerscript: align replace sizing rewind
Why:
The sizing pass skipped a candidate match that the copy pass replaced.

Impact:
Overlapping partial matches now receive a correctly sized output string.

Before/After:
Before, the two passes resumed at different source offsets; after, both
resume at the same offset.

Technical Overview:
Make the sizing pass rewind both its source index and tentative output
length by the full failed partial-match length. This mirrors the copy pass
and ensures that every replacement counted is also written exactly once.
The change preserves the existing empty-find, replacement, and trailing
partial-match behavior.

With the help of AI-Agents: Codex

(cherry picked from commit 667e3f61aec5ee02c5c2ee6f0f8accf6fe4301a9)		 Rainer Gerhards <rgerhards@adiscon.com> no 2026-08-20
mmpstrucdata-Fix-stack-buffer-overflow-with-oversized-RFC.patch mmpstrucdata: Fix stack buffer overflow with oversized RFC5424 structured data

Partial backport of commit bcda60a3692efdf0c8e44102528f5a0ebe0dec6d

See https://github.com/rsyslog/rsyslog/security/advisories/GHSA-8qmr-c66f-g368		 Rainer Gerhards <rgerhards@adiscon.com> no 2026-06-02

All known versions for source package 'rsyslog'

Links