rsyslog-8.2306.0-150400.5.33.1<>,pg2*p9|q_ v9knܽLJ?,.]gZfjQ{!0F4/dgr,ʩ d\O;[H#t)3bMS[ȥcDfbIvlZLmҔ0ػ,+Dy">:P\]ϧe{}]BB?7~Jxg:X ̉MScMO Z>¤FI#}ym@+Iޑt>/>]X^Z>TQ?Qd  ! I  9Zz 4tNN tN N  HN 0N 1@N2xN3N55N67$575<5=D=H=_(=`8=hQ9>Q:DQ="+>"3?";@"CB"KF"dG"xNH#NI$NX%8Y%LZ%[%\%N]&N^*b,cc- d-e-f-l-u-Nv.8wINxK0NyLhzP,P<PnPxP|PPPPPPPPCrsyslog8.2306.0150400.5.33.1The enhanced syslogd for Linux and UnixRsyslog is an enhanced multi-threaded syslogd supporting, among others, MySQL, syslog/tcp, RFC 3195, permitted sender lists, filtering on any message part, and fine grain output format control. It is quite compatible to stock sysklogd and can be used as a drop-in replacement. Its advanced features make it suitable for enterprise-class, encryption protected syslog relay chains while at the same time being very easy to setup for the novice user.g2*h01-ch4a(SUSE Linux Enterprise 15SUSE LLC Apache-2.0 AND GPL-3.0-or-laterhttps://www.suse.com/System/Daemonshttp://www.rsyslog.com/linuxx86_64 if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : for service in rsyslog.service ; do sysv_service=${service%.*} if [ ! -e /usr/lib/systemd/system/$service ] && [ ! -e /etc/init.d/$sysv_service ]; then mkdir -p /run/systemd/rpm/needs-preset touch /run/systemd/rpm/needs-preset/$service elif [ -e /etc/init.d/$sysv_service ] && [ ! -e /var/lib/systemd/migrated/$sysv_service ]; then /usr/sbin/systemd-sysv-convert --save $sysv_service || : mkdir -p /run/systemd/rpm/needs-sysv-convert touch /run/systemd/rpm/needs-sysv-convert/$service fi done fi# # update linker caches # /sbin/ldconfig # # remove obsolete variables # PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in SYSLOG_DAEMON SYSLOG_REQUIRES_NETWORK ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done PNAME=syslog DEF_VAL="no" DEL_TEMPL=/usr/share/fillup-templates/$PNAME.del rm -f $DEL_TEMPL for var in RSYSLOGD_COMPAT_VERSION RSYSLOGD_NATIVE_VERSION ; do echo -e "#\n$var=$DEF_VAL\n" >> $DEL_TEMPL done if [ -f /etc/sysconfig/$PNAME ] ; then /bin/fillup -q -t -r -i -d "=" /etc/sysconfig/$PNAME $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ test -f /etc/sysconfig/$PNAME.new && mv /etc/sysconfig/$PNAME.new /etc/sysconfig/$PNAME fi for i in $DEL_TEMPL /etc/sysconfig/$PNAME.deleted.$$ ; do if [ -f $i ] ; then . $i rm -f $i fi done # # add RSYSLOGD_* variables # PNAME=syslog SUBPNAME=-rsyslog SYSC_TEMPLATE=/usr/share/fillup-templates/sysconfig.$PNAME$SUBPNAME # If template not in new /usr/share/fillup-templates, fallback to old TEMPLATE_DIR if [ ! -f $SYSC_TEMPLATE ] ; then TEMPLATE_DIR=/var/adm/fillup-templates SYSC_TEMPLATE=$TEMPLATE_DIR/sysconfig.$PNAME$SUBPNAME fi SD_NAME="" if [ -x /bin/fillup ] ; then if [ -f $SYSC_TEMPLATE ] ; then echo "Updating /etc/sysconfig/$SD_NAME$PNAME ..." mkdir -p /etc/sysconfig/$SD_NAME touch /etc/sysconfig/$SD_NAME$PNAME /bin/fillup -q /etc/sysconfig/$SD_NAME$PNAME $SYSC_TEMPLATE fi else echo "ERROR: fillup not found. This should not happen. Please compare" echo "/etc/sysconfig/$PNAME and $TEMPLATE_DIR/sysconfig.$PNAME and" echo "update by hand." fi # # Do not use multiple facilities with the same priority pattern. # It causes start failure since rsyslog-6.4.x (bnc#780607). # # FIXME: it seems to be a valid syntax -> rsyslog bug? # if grep -qs '^local[0246],' etc/rsyslog.conf ; then sed -i -e 's/^local\([0246]\),/local\1.*;/g' etc/rsyslog.conf fi # # create dirs, touch log default files # if [ "$1" = "1" ] ; then # first install mkdir -p var/log touch var/log/messages; chmod 640 var/log/messages touch var/log/mail; chmod 640 var/log/mail touch var/log/mail.info; chmod 640 var/log/mail.info touch var/log/mail.warn; chmod 640 var/log/mail.warn touch var/log/mail.err; chmod 640 var/log/mail.err # # touch the additional log files we are using # touch var/log/acpid; chmod 640 var/log/acpid touch var/log/firewall; chmod 640 var/log/firewall touch var/log/NetworkManager; chmod 640 var/log/NetworkManager # # touch the additional log sockets config file # mkdir -p -m750 "./run/rsyslog" touch "./run/rsyslog/additional-log-sockets.conf" chmod 640 "./run/rsyslog/additional-log-sockets.conf" fi # first install # # Enable the rsyslogservice to be started by systemd # # This macro enables based on a systemctl preset config file only if [ -x /usr/bin/systemctl ]; then test -n "$FIRST_ARG" || FIRST_ARG="$1" [ -d /var/lib/systemd/migrated ] || mkdir -p /var/lib/systemd/migrated || : if [ "$YAST_IS_RUNNING" != "instsys" ]; then /usr/bin/systemctl daemon-reload || : fi for service in rsyslog.service ; do sysv_service=${service%.*} if [ -e /run/systemd/rpm/needs-preset/$service ]; then /usr/bin/systemctl preset $service || : rm "/run/systemd/rpm/needs-preset/$service" || : elif [ -e /run/systemd/rpm/needs-sysv-convert/$service ]; then /usr/sbin/systemd-sysv-convert --apply $sysv_service || : rm "/run/systemd/rpm/needs-sysv-convert/$service" || : touch /var/lib/systemd/migrated/$sysv_service || : fi done fi # But we want to enable a syslog-daemon regardless of the preset; # force the creation of a syslog.service alias link (bnc#790805). # We do not check the obsolete SYSLOG_DAEMON variable as we want # to switch when installing it and there is a provider conflict. /usr/bin/systemctl -f enable rsyslog.service >/dev/null 2>&1 || : #restart daemon at the end of the transaction /usr/bin/systemctl set-property "rsyslog.service" Markers=+needs-restart ||:# # stop the rsyslogd daemon when it is running # test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable syslog.socket || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop syslog.socket ) || : fi test -n "$FIRST_ARG" || FIRST_ARG="$1" if [ "$FIRST_ARG" -eq 0 -a -x /usr/bin/systemctl ]; then # Package removal, not upgrade /usr/bin/systemctl --no-reload disable rsyslog.service || : ( test "$YAST_IS_RUNNING" = instsys && exit 0 test -f /etc/sysconfig/services -a \ -z "$DISABLE_STOP_ON_REMOVAL" && . /etc/sysconfig/services test "$DISABLE_STOP_ON_REMOVAL" = yes -o \ "$DISABLE_STOP_ON_REMOVAL" = 1 && exit 0 /usr/bin/systemctl stop rsyslog.service ) || : fi# # update linker caches # /sbin/ldconfigr))p)p`N=@<Mpqp@lRs9`)(Z`9J`9`p99x(9)@9L`kP)9`9 ;@+,++$U4@U+U#T@T@TLTG@TBV@thomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comlnussel@suse.dethomas.blume@suse.comthomas.blume@suse.commichael@stroeder.commichael@stroeder.comkukuk@suse.comrjschwei@suse.comrtyler@brokenco.dethomas.blume@suse.commatthias.gerstner@suse.comdimstar@opensuse.orgThomas.Blume@suse.comegotthold@suse.comThomas.Blume@suse.comkukuk@suse.demichael@stroeder.comThomas.Blume@suse.comastieger@suse.comThomas.Blume@suse.comastieger@suse.comkukuk@suse.deThomas.Blume@suse.comastieger@suse.comrgerhards@adiscon.comkukuk@suse.derbrown@suse.comastieger@suse.comastieger@suse.comastieger@suse.commichael@stroeder.comtchvatal@suse.comdziolkowski@suse.comastieger@suse.comastieger@suse.comastieger@suse.comndas@suse.comastieger@suse.comdimstar@opensuse.orgastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.commrueckert@suse.deastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comjengelh@inai.dejsegitz@novell.comjsegitz@novell.comastieger@suse.comastieger@suse.comastieger@suse.comastieger@suse.comandreas.stieger@gmx.deheinemannj66@gmail.comledest@gmail.com- fix PreserveFQDN option before daemon is restarted (bsc#1231229) add 0001-core-bugfix-rsyslog-messages-may-not-always-have-FQD.patch- restart daemon after update at the end of the transaction (bsc#1230984)- suppress installation errors when systemd is not running (bsc#1218799)- restart daemon after modules packages have been updated (bsc#1217292)- fix rsyslog crash in imrelp (bsc#1210286) * add: 0001-Avoid-crash-on-restart-in-imrelp-SIGTTIN-handler.patch-patches replaced by upgrade (see details in upgrade logs below) 0001-fixing-the-deleteStateOnFileDelete-option.patch 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch CVE-2022-24903.patch - Upgrade to rsyslog 8.2306.0 (jsc#PED-4883) * 2023-06-09: mmnormalize bugfix: if msg cannot be parsed, parser chain is stopped * 2023-06-08: Add new global config option "libcapng.default" * 2023-06-08: imjournal: Add FileCreateMode module parameter * 2023-04-17: core bugfix: potential segfault on busy systems * 2023-05-11: GNUTls Driver: Fix memory leaks in gtlsInitCred * 2023-05-24: CI: update base ubuntu image for github actions * 2023-05-16: OMHIREDIS::ADDED:: New support for 'stream' mode * 2023-05-17: OMHIREDIS::ADDED:: new tests for existing functionalities * 2023-04-25: OMHIREDIS::FIXED:: Correctly suspend module in case of failure * 2023-05-17: OMHIREDIS::FIXED:: Synchronously try to authenticate * 2023-04-25: IMHIREDIS::ADDED:: New support for 'stream' mode * 2023-04-25: REDIS::ADDED:: Implement tests for imhiredis module * 2023-04-12: IMHIREDIS::CLEAN:: various improvements and fixes [#]## CHANGED - [IMHIREDIS] factorize code for different modes - [IMHIREDIS] Clean and improve logging lines - [IMHIREDIS] Poll extinction state less frequently for main thread (less aggresive) - [IMHIREDIS] Set 'key' action parameter to REQUIRED - [IMHIREDIS] Use known message length instead of calculating it when enqueuing message [#]## ADDED - [IMHIREDIS] Missing redis replies' types in enumeration [#]## FIXED - [IMHIREDIS] Correctly initialize instance object, especially for redisNodesList - [IMHIREDIS] Correctly print input mode's value in logs when set incorrectly * 2023-05-17: tests: mmexternal-SegFault-empty-jroot-vg.sh: fix typo * 2023-03-21: modify testbench test to detect wrong imptcp truncation * 2023-03-21: imptcp bugfix: spam log on oversize message * 2023-03-23: core/bugfix: using $uuid msg prop can deadlock rsyslog on shutdown * 2023-03-13: Remove halted LGTM badges on README * 2023-02-16: Do not preserve capabilities when changing credentials * 2023-01-23: CI/QA: do compile test both with NDEBUG set/unset * 2023-01-23: Fixed wrong type conversion in cstrLen() for debug mode as well * 2023-01-18: core/template: implement negative position.to * 2023-01-18: CI: fix github CodeQL settings * 2023-01-17: Remove CAP_DAC_OVERRIDE if privileges dropped * 2023-01-17: Adjust the capability set * 2023-01-13: substring function: enhancement and hardening * 2023-01-11: omfile: add action parameters "rotation.*" * 2023-01-11: CI: use newer version of zookeeper * 2023-01-09: ffaup fix : memory corruption with concurrent workers * 2023-01-02: openssl: fix undefined reference to CRYPTO_set_id_callback * 2022-12-30: testbench: add test for invalid json template generation * 2022-12-30: core bugfix: template system may generate invalid json * 2022-12-28: Fixed wrong type conversion in cstrLen() * 2022-12-08: Add CodeQL workflow for GitHub code scanning - Upgrade to rsyslog 8.2212.0 * 2022-12-05: testbench: make python http server based tests more reliable * 2022-12-05: omprog bugfix: invalid status handling at called program startup * 2022-11-29: testbench bugfix: wrong message injection object of instance 1 * 2022-11-21: rsyslog.conf man page bugfix: description of selectors * 2022-11-18: imtcp bugfix: legacy config directives did no longer work - replaces 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch * 2022-11-16: ksi bugfix: sending of too many signing requests fixed. * 2022-11-14: bugfix: prevent potential segfault when switchung to queue emergency mode * 2022-11-02: imjournal: add second fallback to _COMM * 2022-10-25: core bugfix: local hostname invalid if no global() config object given * 2022-10-25: testbench bugfix: fixed timing issue that sometimes lead to test failure - Upgrade to rsyslog 8.2208.0 * 2022-08-09: ksi bugfix: request cache size and send timeout issue fixed. * 2022-08-09: imjournal bugfix: segmentation fault in close journal * 2022-08-09: net subsystem: support sha256 for StreamDriverAuthMode="x509/fingerprint" * 2022-08-05: imfile bugfix: message loss/duplication when monitored file is rotated * 2022-08-05: ksi bugfix: optimize processing of signer queue to fix delays. * 2022-08-04: ksi bugfix: possible crash fixed when several log files are opened. * 2022-08-04: openssl: add support to split tls commands by semicolon * 2022-08-04: openssl subsystem bugfix: build issue on Solaris * 2022-08-04: openssl: add more details to error messages * 2022-08-04: omclickhouse: capture additional exceptions * 2022-08-04: mmanon bugfix: Simplified and fixed IPv4 digit detection. * 2022-07-21: imptcp: slight tuning * 2022-07-20: template procesing/json: performance optimization * 2022-07-19: core bugfix: memory leak when free action worker data table * 2022-07-13: omfile: support for zstd compression * 2022-07-07: stream cleanup: move error message to debug log, only * 2022-07-04: mmdblookup bugfix: Don't crash Rsyslog on mmdb file errors * 2022-06-28: build error fix: libbson requires out-of-date language constructs * 2022-06-27: OpenSSL: fix depreacted API issues for OpenSSL 3.x - Upgrade to rsyslog 8.2206.0 * 2022-05-25: omelastisearch: allow omitting _type field * 2022-05-18: tcpsrv/imtcp: slight performance improvements * 2022-05-12: imptcp bugfix: worker thread starvation on extreme traffic * 2022-05-11: omelasticsearch: several support option for ElasticSearch 8 - config params searchIndex and documentType can be empty - support for Data Stream API - new config param esVersion.major * 2022-05-09: tcp receiver bugfix: delay/potential hang on some error conditions * 2022-05-05: net bugfix: potential buffer overrun - replaces CVE-2022-24903.patch Advisory: https://github.com/rsyslog/rsyslog/security/advisories/GHSA-ggw7-xr6h-mmr8#advisory-comment-72243 * 2022-05-05: imptcp: set OS worker thread name * 2022-04-26: mmanon bugfix: shortened IPv6 form not always anonymized * 2022-04-22: mmdblookup fix: wrong copy of buffer * 2022-04-22: mmdblookup: several enhancements - support arrays in MMDB entry - support escaped quotes '"' in MMDB entry - support '<' characters in MMDB entry, when in a field - support '}' characters in MMDB entry, when in a field - Upgrade to rsyslog 8.2204.0 * 2022-04-18: gnutls bugfix: possibility of infinite loop * 2022-04-17: core/bugfix: errorfile could grow over max configures size * 2022-04-17: omkafka bugfix: potential misadressing * 2022-04-06: added new "FullJSONFmt" standard template (with addtl fields) * 2022-04-04: imfile: potential processing delay * 2022-04-04: bugfix: cosmetic data races * 2022-04-01: add property options to support ISO week/year number * 2022-04-01: core bugfix: "action suspended" message was emitted even when turned off * 2022-03-31: testbench: add more tests for rscript comparison operations * 2022-03-31: core bugfix: make internal logs emitted during HUP procesing appear quicker * 2022-03-20: refactor: Move the parser directive to the main config * 2022-03-16: refactor: ake the main message queue part of the config * regression bugfix: rsyslog may segfault during startup * regression fix: script string comparison did not work correctly - Upgrade to rsyslog 8.2202.0 * 2022-02-11: Make action counter part of the config * 2022-02-09: imfile: Remove inotify watch descriptor on inode change detected - replaces 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch * 2022-02-03: omelasticsearch: Fix indexSuccess impstats counter in bulkmode * 2022-01-28: rscript: literal numbers were not compared correctly * 2022-01-17: ompgsql: PGsslInUse not supported on old distros * 2021-12-31: ompgsql: allow connection params via connection string * 2022-01-17: CI: remove fedora 33 based testing * 2022-01-14: Terminate all tcpsrv threads properly * 2022-01-04: Move timezone specific variables to rsconf * 2022-01-13: Fixes #4395 by correctly checking for EPIPE. * 2022-01-12: Move rsyslog global parameters to rsconf_t struct * 2022-01-12: cleanup: remove unused variable * 2022-01-07: CI: cleanup journal test environment * 2022-01-06: CI: remove unnecessary dependency * 2022-01-05: Update omlibdbi.c * 2022-01-05: omhttp: Fix memory leak in lokirest batchmode * 2021-12-15: Clarify meaning of loadConf and RunConf - Upgrade to rsyslog 8.2112.0 * 2021-12-14: refactor:Deallocate outchannel resources in rsconf destructor * 2021-12-14: refactor: use runConf instead of loadConf in ratelimiting during runtime * 2021-11-22: new contribtion: URL parser module function using libfa * 2021-11-18: mmanon: relax IPv6 detection - improve anonymization * 2021-11-10: ruleset bugfix: ruleset queue was incorrectly named * 2021-11-10: omsnmp: update module to current IP best practices * 2021-10-27: ommysql: fix threading bug * 2021-10-25: testbench: false positive when impstats was not built * 2021-10-25: imtcp: add support for permittedPeers setting at input() level * 2021-10-25: testbench: add test for legacy permittedPeer statement - replaces 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch - Upgrade to rsyslog 8.2110.0: * 2021-10-13: PrivDropToUser: fix abortOnIDResolutionFail handling #2 * 2021-10-12: PrivDropToUser: fix abortOnIDResolutionFail handling * 2021-09-17: rscript fix: ruleset called async when ruleset had queue.type="direct" * 2021-10-07: tcpsrv: fix compilation without exceptions * 2021-09-29: build issue: handle undefined MAXPATHLEN, PATH_MAX * 2021-10-06: Fix typo in error message. * 2021-09-21: mmkubernetes bugfix: no connection retry to kubernetes APP * 2021-09-13: use correct api for es 6 and later * 2021-09-20: openssl: Correct gnutlsPriorityString (custom ciphers) behaviour * 2021-09-20: ksi bugfix: locking bug fixed in rsksiCtxOpenFile * 2021-09-13: Fix ElasticSearch Test broken by ES incompatibility * 2020-11-21: imhttp updates - query parameter ingestion & basic auth support * 2021-09-08: openssl: extended output information on connection failure * 2021-09-02: queue: Add NULL check in qDeqLinkedList - replaces 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch * 2021-09-06: core bugfix: use of property $wday terminates string * 2021-09-02: gnutls: Propagate PrioritizeSAN when accepting a new connection * 2021-08-24: ratelimit: fix rate limiting for already parsed messages * 2021-08-23: config: implement script-equavalent for $PrivDrop* statements - Upgrade to rsyslog 8.2108.0: * 2021-08-16: openssl tls: Improved error message output on tls failures. * 2021-07-01: imfile add `ignoreolderthanoption` * 2021-08-10: imklog: fix invalid memory adressing, could cause abort * 2021-08-09: omelasticsearch: fix incorrect mutex error handling regression * 2021-08-09: imfile bugfix: hash char invalidly added in readmode != 0 * 2021-08-08: imudp: add socket type (IPv4 vs. 6) to input name * 2021-07-13: fixing the deleteStateOnFileDelete option - replaces 0001-fixing-the-deleteStateOnFileDelete-option.patch * 2021-07-07: CI: add test for imtcp not correctly starting up and a Solaris fix * 2021-08-05: omfwd: add capability for action-specific TLS certificate settings * 2021-07-01: imtcp: permit to use different certificate files per input/action * 2021-08-04: debug support: add indication of "being HUPed" to debug log * 2021-08-04: imptcp bugfix: keep alive interval was incorrectly set * 2021-07-22: Close file descriptor when freshStartTail is turned on * 2021-07-22: [omelasticsearch] Improve errorFile mutex handling * 2021-07-08: openssl network driver bugfix: small memory leak * 2021-07-07: tcpsrv bugfix: abort if no listener could be started * 2021-07-01: tcp subsystem: fix cosmetic memory leak on shutdown * 2021-07-01: fix typo in error message * 2021-06-30: OMMONGODB :: Fixes * 2021-06-29: mmkubernetes fix for apiserver error handling * 2021-06-21: omkafka updates * 2021-06-22: percentile module to track percentile metrics via impstats * 2021-06-17: CI: disable Travis CI for the time being * 2021-04-15: omhttp: Fix dynrestpath param in batch mode * 2021-06-14: add predefined template RSYSLOG_SyslogRFC5424Format * 2021-06-10: bugfix: _sender_stats reports integer counter as string- fix removal of imfile state files (bsc#1213212) * add 0001-fixing-the-deleteStateOnFileDelete-option.patch- fix parsing of legacy config syntax (bsc#1205275) * add: 0001-testbench-add-test-for-legacy-permittedPeer-statemen.patch 0002-imtcp-bugfix-legacy-config-directives-did-no-longer-.patch- remove $klogConsoleLogLevel setting from rsyslog.conf (bsc#1191833) * this legacy setting from pre-systemd times is obsolete and can block important systemd messages- fix segfault in qDeqLinkedList during shutdown (bsc#1199283) * add 0001-queue-Add-NULL-check-in-qDeqLinkedList.patch- Remove inotify watch descriptor in imfile on inode change detected (bsc#1198939) * add 0001-imfile-Remove-inotify-watch-descriptor-on-inode-chan.patch- (CVE-2022-24903) fix potential heap buffer overflow in modules for TCP syslog reception (bsc#1199061) * add CVE-2022-24903.patch- add service dependencies for remote logging (bsc#1194669) - update config example in remote.conf to match upstream documentation- fix config parameters in specfile (bsc#1194593)- Upgrade to rsyslog 8.2106.0: * NOTE: the prime new feature is support for TLS and non-TLS connections via imtcp in parallel. Furthermore, most TLS parameters can now be overriden at the input() level. The notable exceptions are certificate files, something that is due to be implemented as next step. * 2021-06-14: new global option "parser.supportCompressionExtension" This permits to turn off rsyslog's single-message compression extension when it interferes with non-syslog message processing (the parser subsystem expects syslog messages, not generic text) closes https://github.com/rsyslog/rsyslog/issues/4598 * 2021-05-12: imtcp: add more override config params to input() It is now possible to override all module parameters at the input() level. Module parameters serve as defaults. Existing configs need no modification. * 2021-05-06: imtcp: add stream driver parameter to input() configuration This permits to have different inputs use different stream drivers and stream driver parameters. closes https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-29: imtcp: permit to run multiple inputs in parallel Previously, a single server was used to run all imtcp inputs. This had a couple of drawsbacks. First and foremost, we could not use different stream drivers in the varios inputs. This patch now provides a baseline to do that, but does still not implement the capability (in this sense it is a staging patch). Secondly, we now ensure that each input has at least one exclusive thread for processing, untangling the performance of multiple inputs from each other. see also: https://github.com/rsyslog/rsyslog/issues/3727 * 2021-04-27: tcpsrv bugfix: potential sluggishnes and hang on shutdown tcpsrv is used by multiple other modules (imtcp, imdiag, imgssapi, and, in theory, also others - even ones we do not know about). However, the internal synchornization did not properly take multiple tcpsrv users in consideration. As such, a single user could hang under some circumstances. This was caused by improperly awaking all users from a pthread condition wait. That in turn could lead to some sluggish behaviour and, in rare cases, a hang at shutdown. Note: it was highly unlikely to experience real problems with the officially provided modules. * 2021-04-22: refactoring of syslog/tcp driver parameter passing This has now been generalized to a parameter block, which makes it much cleaner and also easier to add new parameters in the future. * 2021-04-22: config script: add re_match_i() and re_extract_i() functions This provides case-insensitive regex functionality. closes https://github.com/rsyslog/rsyslog/issues/4429- Upgrade to rsyslog 8.2104.0: * rainerscript: call getgrnam_r repeatedly to get all group members (bsc#1178490) * new contributed module imhiredis * new built-in function get_property() to access property vars * mmdblookup: add support for mmdb DB reload on HUP * script bugfix: empty array in foreach() improperly handled * imjournal bugfixes (handle leak, empty file) * new contributed function module fmunflatten * test bugfix: some tests did not work with newer TLS library versions * some improvements to project CI- update remote.conf example file to new 'Address' and 'Port' notation (bsc#1182653)- HTTPS URLs used for source - Upgrade to rsyslog 8.2102.0: * omfwd: add stats counter for sent bytes * omfwd: add error reporting configuration option * action stats counter bugfix: failure count was not properly incremented * action stats counter bugfix: resume count was not incremented * omfwd bugfix: segfault or error if port not given * lookup table bugfix: data race on lookup table reload * testbench modernization * testbench: fix invalid sequence of kafka tests runs * testbench: fix kafkacat issues * testbench: fix year-dependendt clickhouse test- Upgrade to rsyslog 8.2012.0: * testbench bugfix: some tests did not work in make distcheck * immark: rewrite with many improvements * usability: re-phrase error message to help users better understand cause * add new system property $now-unixtimestamp * omfwd: add new rate limit option * omfwd bug: param "StreamDriver.PermitExpiredCerts" is not "off" by default- prepare usrmerge (boo#1029961)- fix location and naming of journald dropin (bsc#1178288)- remove legacy stuff from specfile * sysvinit is not supported anymore, so remove all tests related to systemv in the specfile- Upgrade to rsyslog 8.2010.0: * gnutls TLS subsystem bugfix: handshake error handling * core/msg bugfix: memory leak * core/msg bugfix: segfault in jsonPathFindNext() when not an object * openssl TLS subsystem: improvments of error and status messages * add 'exists()' script function to check if variable exists * core bugfix: do not create empty JSON objects on non-existent key access * gnutls subsysem bugfix: potential hang on session closure * core/network bugfix: obey net.enableDNS=off when querying local hostname * core bugfix: potential segfault on query of PROGRAMNAME property * imtcp bugfix: broken connection not necessariy detected * new module: imhttp - http input * mmdarwin bugfix: potential zero uuid when reusing existing one * imdocker bugfix: build issue on some platforms * omudpspoof bugfix: make compatbile with Solaris build * testbench fix: python 3 incompatibility * core bugfix: segfault if disk-queue file cannot be created * cosmetic: fix dummy module name in debug output * config bugfix: intended warning emitted as error- Upgrade to rsyslog 8.2008.0 Way too many changes since 8.39.0 to be listed here. - Added custom unit file rsyslog.service because systemd service file was removed from upstream project - Removed obsolete patches: * 0001-satisfy-gcc-flag-fno-common.patch * rsyslog-pgsql-pkg-config.patch * rsyslog-unit.patch- Use systemd_ordering instead of requiring to make rsyslog useable in containers.- Fix the URL for bug reporting, should not point to novell.com (bsc#1173433)- Add support for omkafka which is now in Factory, and 15.x repos- avoid build error with gcc flag -fno-common (bsc#1160414) * add 0001-satisfy-gcc-flag-fno-common.patch- removal of SuSEfirewall2 service, since SuSEfirewall2 has been replaced by firewalld, see [1]. [1]: https://lists.opensuse.org/opensuse-factory/2019-01/msg00490.html- Add rsyslog-pgsql-pkg-config.patch: use pkgconfig to find the right libraries/directories for postgresql. According to pgsql upstream, pg_config must only be used to buildpgsql modules.- set default permissions before include directives (bsc#1126233) * Logfile open modes depend on position in the config file, see https://www.rsyslog.com/doc/rsconf1_filecreatemode.html- Upgrade to rsyslog 8.39.0 * imfile: improve truncation detection * imjournal: work around journald excessive reloading behavior * errmsg: remove no longer needed code * queue bugfix: invalid error message on queue startup * bugfix imrelp: regression with legacy configuration startup fail * bugfix imudp: stall of connection and/or potential segfault * bugfix gcry crypto driver: small memleak * fix potential misadressing in encryption subsystem * ksi subsystem changes * bugfix core: regex compile error messages could be incorrect * bugfix core: potential hang on rsyslog termination * bugfix imkafka: system hang when backgrounded * bugfix imfile: file change was not reliably detected * bugfix imrelp: do not fail build if librelp does not have relpSrvSetLstnAddr * bugfix queue subsystem: DA queue did ignore encryption settings * bugfix KSI: lmsig-ksils12 module skips signing the last block * bugfix fmhash: function hash64mod sometimes returned wrong result * bugfix core/debug: data written to random fd 2 under some debug settings- rsyslog configuration cleanup by filter rules in separate files (bug#1102720) * add parsing of additional filter rules in /etc/rsyslog.d/*.frule * add acpid.frule, firewall.frule, NetworkManager.frule- Enable ForwardToSyslog for journald to get syslog messages [bsc#1110456]- Update to rsyslog 8.38.0: * imfile: support for endmsg.regex * omhttp: new contribued module * imrelp: add support for seting address to bind to (#894) * ommysql: support mysql unix domain socket * omusrmsg: do not fall back to max username length of 8 * various bug fixes and minor updates to other modules and core * various fixes for memory leaks- remove references to obsolete SYSLOG_REQUIRES_NETWORK variable (bsc#1101642)- rsyslog 8.36.0: * Liblogging-stdlog deprecated * OpenSSL based TLS driver added in addition to GnuTLS * GnuTLS TLS driver: support intermediate certificates * imptcp: add ability to configure socket backlog * fmhash: new hash function module * updates and fixes to various modules * omfwd: add support for bind-to-address for UDP * mmkubernetes: new module - updates and fixes to various modules- fix CVE-2015-3243 rsyslog: some log files are created world-readable (bsc#935393)- rsyslog 8.33.1: * devcontainer: use some more sensible defaults * auto-detect if running inside a container (as pid 1) * config: add include() script object * template: add option to generate json "container" * core/template: add format jsonf to constant template entries * config: add ability to disable config parameter ("config.enable") * script: permit to use environment variables during configuration * new global config parameter "shutdown.enable.ctlc" * config optimizer: detect totally empty "if" statements and optimize them out * template: constant entry can now also be formatted as json field * omstdout: support for new-style configuration parameters added * core: set TZ on startup if not already set * imjournal bugfix: file handle leak during journal rotation * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected * script bugfix: replace() function worked incorrectly in some cases * core bugfix: misadressing in external command parser * core bugfix: small memory leak in external command parser * core bugfix: string not properly terminated when RFC5424 MSGID is used * bugfix: strndup() compatibility layer func copies too much - the upstream systemd unit file was changed to no longer write the rsyslog pid, as it is no longer required for tracking under systemd (-iNONE). Adjust rsyslog-unit.patch to match.- Use %license instead of %doc [bsc#1082318]- fix includes for apparmor profile (bsc#1080238)- rsyslog 8.32.0 * libfastjson 0.99.8 required * libczmq >= 3.0.2 is now required for omczmq * libcurl is now needed for rsyslog core * rsyslogd: add capability to specify that no pid file shall be written * core improvements and bug fixes * RainerScript improvements and bug fixes * build fixes, including gcc7 fixes drop 0001-imgssapi-fix-compiler-warnings.patch * various bug fixes in multiple modules- remove build dependency on libee- Disable news by default, we don't need to clobber all systems with this for the very few remaining news servers- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)- Ensure user "news" exists - bsc#1068678- rsyslog 8.30.0 * changed behaviour: all variables are now case-insensitive by default * core: handle (JSON) variables in case-insensitive way * imjournal: made switching to persistent journal in runtime possible * mmanon: complete refactor and enhancements * imfile: add "fileoffset" metadata * RainerScript: add ltrim and rtrim functions * core: report module name when suspending action * core: add ability to limit number of error messages going to stderr * tcpsrv subsystem: improvate clarity of some error messages * imptcp: include module name in error msg * imtcp: include module name in error msg * tls improvement: better error message if certificate file cannot be read * omfwd: slightly improved error messages during config parsing * ommysql improvements * ommysql bugfix: do not duplicate entries on failed transaction * imtcp bugfix: parameter priorityString was ignored * template/bugfix: invalid template option conflict detection * core/actions: fix handling of data-induced errors * core/action bugfix: no "action suspended" message during retry processing * core/ratelimit bugfix: race can lead to segfault * core bugfix: rsyslog aborts if errmsg is generated in early startup * core bugfix: informational messages was logged with error severity * core bugfix: --enable-debugless build was broken * queue bugfix: file write error message was incorrect * omrelp bugfix: segfault when rebindinterval parameter is used * omkafka bugfix: invalid load of failedmsg file on startup if disabled * kafka bugfix: problem on invalid kafka configuration values * imudp bugfix: UDP oversize message not properly handled * core bugfix: memory corruption during configuration parsing * core bugfix: race on worker thread termination during shutdown * omelasticsearch: avoid ES5 warnings while sending json in bulkmode * omelasticsearch bugfix: incompatibility with newer ElasticSearch version * imptcp bugfix: invalid mutex addressing on some platforms * imptcp bugfix: do not accept missing port in legacy listener definition - build requirements: * libfastjson 0.99.7 is now mandatory * libsystemd-journal >= 234 is now recommended - packaging: * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch- rsyslog 8.29.0: * imptcp: add experimental parameter "multiline" * imptcp: framing-related error messages now also indicate remote peer * imtcp: framing-related error messages now also indicate remote peer * imptcp: add session statistics conunter * imtcp: add ability to specify GnuTLS priority string * impstats: add new ressoure counter "openfiles" * pmnormalize: new parser module * core/queue: provide informational messages on thread startup and shutdown * omfwd/udp: improve error reporting, depricate maxerrormessages parameter * core: add parameters debug.file and debug.whitelist * core/net.c: improve UDP socket creation error messages * omfwd/udp: add "udp.sendbuf" parameter * core: make rsyslog internal message rate-limiter configurable * omelasticsearch bugfixes and changed ES5 API support + avoid 404 during health check + avoid ES5 warnings while sending json + bugfix for memomry leak while writing error file * imfile bugfix: wildcard detection issue on path wildcards * omfwd bugfix: always give reason for suspension * omfwd bugfix: configured compression level was not properly used * imptcp bugfix: potential socket leak on session shutdown * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode * imklog: fix permitnonkernelfacility not working * impstats bugfix: impstats does not handle HUP * core bugfix: segfault after configuration errors * core/queue bugfixes * lmsig_ksi: removed pre-KSI_LS12 componentsVersion 8.28.0 [v8-stable] 2017-06-27 * omfwd: add parameter "tcp_frameDelimiter" * omkafka: large refactor of kafka subsystem * imfile: improved handling of atomically renamed file (w/ wildcards) * imfile: add capability to truncate oversize messages or split into multiple * mmdblookup fixes and extensions * bugfix: fixed multiple memory leaks * imptcp: add new parameter "flowControl" * imrelp: add "maxDataSize" config parameter * multiple modules: gtls: improve error if certificate file can't be opened * omsnare: allow different tab escapes * omelasticsearch: converted to use libfastjson instead of json-c * imjournal: _PID fallback * added fallback for _PID proprety when SYSLOG_PID is not available * introduced new option "usepid" which sets which property should rsyslog use, it has 3 states system|syslog|both, default is both * deprecated "usepidfromsystem" option, still can be used and override the "usepid" * it is possible to revert previous default with usepid="syslog" * multiple modules: add better error messages when regcomp is failing * omhiredis: fix build warnings * imfile bugfix: files mv-ed in into directory were not handled * omprog bugfix: execve() incorrectly called * imfile bugfix: multiline timeout did not work if state file exists * lmsig_ksi-ls12 bugfix: build problems on some platforms * core bugfix: invalid object type assertion * regression fix: local hostname was not always detected properly... * bugfix: format security issues in zmq3 modules (bsc#1051798) * bugfix build system: add libksi only to those binaries that need it * bugfix KSI ls12 components: invalid tree height calculation- Drop module-guardtime package * Upstream libgt died and it does not work with new opensslVersion 8.27.0 [v8-stable] 2017-05-16 - imkafka: add module - imptcp enhancements: * optionally emit an error message if incoming messages are truncated * optionally emit connection tracking message (on connection create and close) * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * improve octect-counted mode detection: if the octet count is larger then the set frame size (or overly large in general), it is now assumed that octet-stuffing mode is used. This probably solves a number of issues seen in real deployments. - imtcp enhancements: * add parameter "discardTruncatedMsg" to permit truncation of oversize messages * add "maxFrameSize" parameter to specify the maximum size permitted in octet-counted mode - imfile bugfix: "file not found error" repeatedly being reported for configured non-existing file. In polling mode, this message appeared once in each polling cycle, causing a potentially very large amout of error messages. Note that they were usually emitted too infrequently to trigger the error message rate limiter, albeit often enough to be a major annoance. - imfile: in inotify mode, add error message if configured file cannot be found - imfile: add parameter "fileNotFoundError" to optinally disable "file not found" error messages - core: replaced gethostbyname() with getaddrinfo() call Gethostbyname() is generally considered obsolete, is not reentrant and cannot really work with IPv6. Changed the only place in rsyslog where this call remained. Thanks to github user jvymazal for the patch - omkafka: add "origin" field to stats output See also https://github.com/rsyslog/rsyslog/issues/1508 Thanks to Yury Bushmelev for providing the patch. - imuxsock: rate-limiting also uses process name both for the actual limit procesing as well as warning messages emitted see also https://github.com/rsyslog/rsyslog/pull/1520 Thanks to github user jvymazal for the patch - Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12) - rsylsog base functionality now builds on osx (Mac) Thanks to github user hdatma for his help in getting this done. - build now works on solaris again - imfile: fix cross-platform build issue see also https://github.com/rsyslog/rsyslog/issues/1494 Thanks to Felix Janda for bug report and solution suggestion. - bugfix core: segfault when no parser could parse message- rsyslog 8.26.0: * liblognorm 2.0.3 is required for mmnormalize * enable internal error messages at all times * core: added logging name of source of rate-limited messages * omfwd: omfwd: add support for network namespaces * imrelp: honor input name if provided when submitting to impstats * imptcp: add ability to set owner/group/access perms for uds * mmnormalize: add ability to load a rulebase from action() parameter * pmrfc3164 improvements + permit to ignore leading space in MSG + permit to use at-sign in host names + permit to require tag to end in colon * add new global parameter "umask" * core: make use of -T command line option more secure * omfile: add error if both file and dynafile are set * bugfix: build problem on MacOS (not a supported platform) * regression fix: in 8.25, str2num() returned error on empty string * bugfix omsnmp: improper handling of new-style configuration parameters * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages * bugfix imfile: wrong files were monitored when using multiple imfile inputs * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults * bugfix: immark emitted error messages with text "imuxsock" * bugfix tcpflood: build failed if RELP was disabled * fix gcc6 compiler warnings * the output module array passing interface has been removed- use 8.25.0 documentation tarball- rsyslog 8.25.0: * imfile: add support for wildcards in directory names * add new global option "parser.PermitSlashInProgramname" * mmdblookup: fix build issues, code cleanup * improved debug output for queue corruption cases * an error message is now displayed when a directory owner cannot be set * rainerscript: add new function ipv42num * rainerscript: add new function num2ipv4 * bugfix: ratelimiter does not work correctly is time is set back * core: fix potential message loss in old-style transactional interface * bugfix queue subsystem: queue corrupted if certain msg props are used * bugfix imjournal: fixed situation when time goes backwards * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer * bugfix core: str2num mishandling empty strings * bugfix rainerscript: set/unset statement do not check variable name validity * bugfix mmrm1stspace: last character of rawmsg property was doubled * bugfix imtcp: fix very small (cosmetic) memory leak * However, the leak breaks memleak checks in the testbench.- sync bug and fate numbers from IBS changes.- rsyslog 8.24.0(fate#320546): * mmrm1stspace: new module; removes first space in MSG if present * KSI signature provider: file permissions can now be specified * omzmq: new features * when the hostname is empty, we now use "localhost-empty-hostname" * omelasticsearch: remove "asyncrepl" config parameter * omfwd: Add support for bind-to-device (see below on same for imudp) * imudp: Add support for bind-to-device * imudp: limit rcvbufsize parameter to max 1GiB * rainerscript: implement new "call_indirect" statement * bugfix imjournal: make state file handling more robust * bugfix core: lookup table reload was not properly integrated * bugfix core: potential dealock on shutdown * bugfix ommongodb: did not work in v8 due to invalid indirection * bugfix ommongodb: fix tryResume handling * bugfix omfwd: retry processing was not done correctly, could stall * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on - contributed modules not enabled due to build issues: * mmdblookup: new maxminddb lookup message modify plugin- Replace pkgconfig(libsystemd-journal) BuildRequires with pkgconfig(libsystemd): the sub-libraries have been merged into libsystemd since 209 and have ultimately been removed since 230.- rsyslog 8.23.0: * requiring libfastjson 0.99.3 * KSI signatures: removed SHA2-224 hash algorithm * imfile: new timeout feature for multi-line reads * omfile: improve robustness against network file system failures * pmaixforwardedfrom: support for AIX syslogd -s option * omelasticsearch: add ability to specify max http request size * omelasticsearch: high availability addressing of ElasticSearch cluster * omelasticsearch: make compatible with ElasticSearch 2.x and 5.x * omhiredis: add dynakey attribute. * omtcl: new contributed module * RainerScript: provide a capability to set environment variables * lookup tables: improved error checking * queue subsystem: add configuration parameter "queue.samplinginterval" * various bug fixes * rsgtutil: option to specify KSI publications file certificate constraints - includes changes from 8.22.0: * ompgsql: add template support * generate somewhat better error message on config file syntax error - includes changes from 8.21.0: * CHANGE OF BEHAVIOUR: by default, internal messages are no longer logged via the internal bridge to rsyslog but via the syslog() API call [either directly or via liblogging). For the typical single-rsyslogd-instance installation this is mostly unnoticable (except for some additional latency). If multiple instances are run, only the "main" (the one processing system log messages) will see all messages. To return to the old behaviour, do either of those two: 1) add in rsyslog.conf: global(processInternalMessages="on") 2) export the environment variable RSYSLOG_DFLT_LOG_INTERNAL=1 This will set a new default - the value can still be overwritten via rsyslog.conf (method 1). Note that the environment variable must be set in your **startup script**. For more information, please visit http://www.rsyslog.com/rsyslog-error-reporting-improved/ * slightly improved TLS syslog error messages * queue subsystem: improved robustness- rsyslog 8.20.0: * omrelp: add configurable connection timeout * pmrfc3164: add support for slashes in hostname * bugfix omfile: handle chown() failure correctly * omfile now better conveys status of unwritable files back to core * config files recursively including themselfes are now detected * refactored code to not emit compiler warnings in "strict mode" * bugfix: fix some issues with action CommitTransaction() handling * bugfix omqmqp1: connecting to the message bus fails on nonstandard port * testbench/CI enhancements - Build requirements: * librelp 1.2.12- rsyslog 8.19.0: * omelasticsearch: add option to permit unsigned certs * imrelp: better error codes on unvailablity of TLS options * default stack size for inputs has been explicitely set to 4MiB * performance improvements * miscellaneous minor cleanup * fix: potential misadressing in template config processing * bugfix omfile: async output file writing does not respect flushing * bugfix imfile: corrupted multi-line message when state data was persisted * bugfix imfile: missing newline after first line of multiline message * bugfix: dynstats unusedMetricTtl bug * bugfix build system: build was broken on SunOS * bugfix: afterRun entry point not correctly called * bugfix dynstats: do not leak file handles * bugfix omelasticsearch: disable libCURL signal handling * bugfix omelasticsearc: some regressions were fixed * improved wording: gnutls error message points to potential cause- rsyslog 8.18.0(bnc#958728): * templates: add option to convert timestamps to UTC * omjournal: fix segfault (regression in 8.17.0) * imptcp: added AF_UNIX support * new template options * compressSpace * date-utc * redis: support for authentication * omkafka: makes kafka-producer on-HUP restart optional * imfile: new "FreshStartTail" input parameter * omjournal: fix libfastjson API issues * ommongodb: fix json API issues * dynamic stats subsystem: a couple of smaller changes * foreach loop: now also iterates over objects (not just arrays) * enhancement: queue subsystem is more robst in regard to some corruptions * enhancement: Allow rsyslog to bind UDP ports even w/out specific interface being up at the moment. * new External plugin for sending metrics to SPM Monitoring SaaS * bugfix imfile: fix memory corruption bug when appending @cee * bugfix: memory misallocation if position.from and position.to is used a negative amount of memory is tried to be allocated if position.from is smaller than the buffer size (at least with json variables). This usually leads to a segfault. * bugfix: fix potential memleak in TCP allowed sender definition * bugfix: $PrivDropToGroupID actually did a name lookup * bugfix: small memory leak in imfile * bugfix: double free in jsonmesg template * bugfix: incorrect formatting of stats when CEE/Json format is used * bugfix omfwd: new-style keepalive action parameters did not work due to being inconsistently spelled inside the code. Note that legacy parameters $keepalive... always worked * bugfix: memory leaks in logctl utility * bugfix omrelp: fix segfault if no port action parameter was given * bugfix imtcp: Messages not terminated by a NL were discarded- rsyslog 8.17.0: * improve json variable performance * new experimental feature: lookup table suport * new feature: dynamic statistics counters * new contributed plugin: omampq1 for AMQP 1.0-compliant brokers * new set of UTC-based $now family of variables ($now-utc, $year-utc, ...) * simplified locking when accessing message and local variables * new global parameter "debug.unloadModules" * timestamp handling: guard against invalid dates * imfile: add "trimlineoverbytes" input paramter * ommongodb: add support for extended json format for dates * omjournal: add support for templates * imuxsock: add "ruleset" input parameter(fate#320667) * imptcp: performance improvements * improve interface definition in some modules, e.g. mmanon, mmsequence * rsgtutil: dump mode improvements + auto-detect signature file type + ability to dump hash chains for log extraction files * bugfix: unixtimestamp date format was incorrectly computed (leap year) * bugfix: date-ordinal date format was incorrectly computed (leap year) * bugfix: some race when shutting down input module threads * bugfix tcpflood: did not handle connection drops correct in TLS case * bugfix: abort if global parameter value was wrong * bugfix omkafka: fix potential NULL pointer addressing * bugfix impstats: @cee cookie was prefixed to wrong fromat (json vs. cee) * bugfix imfile: fix race during startup that could lead to some duplication * bugfix: potential loss of single message at queue shutdown * bugfix: potential deadlock with heavy variable access * bugfix ommysql: on some platforms, serverport parameter had no effect * bugfix omelasticsearch: invalid pointer dereference * bugfix omhiredis: serverport config parameter did not reliably work * bugfix rsgtutil: -h command line option did not work * bugfix lexer: hex numbers were not properly represented * bugfix TLS syslog: intermittent errors while sending data * bugfix imfile: abort on startup if no slash was present in file name param * bugfix rsgtutil: fixed abort when using short command line options * bugfix rsgtutil: invalid computation of log record extraction file * bugfix build system: KSI components could only be build if in default path- rsyslog 8.16.0: * rsgtutil: Added extraction support including loglines and hash chains. * new system properties for $NOW properties based on UTC * various bug fixes and improvements- fix build on sle11: use package name buildrequires instead of pkgconfig- build with libfastjson (mandatory from 8.16.0)- rsyslog 8.15.0: * KSI (incompatible changes): + KSI utilities: Added option to set publication url via - -publications-server. Required for signature verification. + UserID and UserKey can be set by parameter + Fixed wrong TLV container for KSI signatures from 0905 to 0906. + somewhat improved error messages + Update for and use libksi 3.4.0.x * New contributed modules: + pmpanngfw: for translating Palo Alto Networks logs * pmciscoios: support for asterisk before timestamp added * solr external output plugin much enhanced * omrabbitmq: improvements * add support for libfastjson (as a replacement for json-c) * pmciscoios: support for some format variations * improvments for 0mq modules: + omczmq - suspend / Retry handling + omczmq - improved efficiency + omczmq - added ability to set a timeout for sends + omczmq - set topics can be in separate frame (default) or part of message frame (configurable) + imczmq - ZMQ_ROUTER support * Note the upstream supported modules not enabled in SUSE package: + grok (mmgrok) + omkafka * add support for building with libfastjson * bugfix: invalid mutex handling in omfile async write mode could lead to segfault, even though highly unlikely (caught by testbench on a single platform) (bsc#1000488)- rsyslog 8.14.0: * add property "rawmsg-after-pri" * bugfix: potential misadresseing in imfile * bugfix: re_extract RainerScript function did not work- rsyslog 8.13.0: * ZeroMQ enhancements * Redis enhancements * mmnormalize: liblognorm error messages are now emitted via regular rsyslog error reporting mechanism (aka "are now logged") * networking improvements - drop rsyslog-8.12.0-parallel-build.patch, is upstream - drop rsyslog-8.12.0-gnutls.patch, same- rsyslog 8.12.0: * Harmonize resetConfigVariables values and defaults * GT/KSI: fix some issues in signature file format and add conversion tool * bugfix: ommysql did not work when gnutls was enabled * bugfix omfile: potential memory leak on file close * bugfix omfile: potential race in dynafile detection/creation * bugfix omfile: Fix race-condition detection in path-creation code * bugfix parser subsystem: potential misadressing in SanitizeMsg() * imfile: files moved outside of directory are now (properly) handled * bugfix: imfile: segfault when using startmsg.regex * bugfix imfile: file table was corrupted when on file deletion * bugfix ompgsql: transaction were improperly handled * bugfix mmjsonparse: memory leak if non-cee-json message is processed * testbench: remove raciness from UDP based tests * testbench: added bash into all scripts makign it mandatory * bugfix testbench: Fixed problem building syslog_caller util when liblogging-stdlog is not available. - add upstream patches: * rsyslog-8.12.0-gnutls.patch to fix build with gnutls * rsyslog-8.12.0-parallel-build.patch to fix parallel build- rsyslog 8.11.0 - new features: * signature provider for Keyless Signature Infrastructure (KSI) - bug fixes: * imfile: regex multiline mode ignored escapeLF option * omkafka: fixed several concurrency issues, most of them related to dynamic topics. * execonlywhenpreviousissuspended did not work correctly * core engine: ensured global variable atomicity * imfile: segfault when using startmsg.regex because of empty log line- rsyslog 8.10.0: * imfile: add capability to process multi-line messages based on regex * pmrfc3164: add new parameter "detect.yearAfterTimestamp" * pmrfc3164: add new parameter "permit.squareBracesInHostname" * supplementary groups are now set when dropping privileges * imfile: added brace glob expansion to wildcard * zmq: add the ability for zeromq input and outputs to advertise their presence on UDP via the zbeacon API. * added omhttpfs: contributed module for writing to HDFS via HTTP * bug fixes - packaging changes: * build with GnuTLS support again as 3.4.0 is now supported- Documentation does not depend on the presence of anything- Adjusted apparmor profile based on the suggestions by Christian Boltz * Removed empty files: module-pgsql, module-relp, module-gssapi, module-gtls * Moved profiles to /usr/share/apparmor/extra-profiles/ * Blocked capability block_suspend plus some other small fixes- Adjusted apparmor profile to prevent aa-genprof failures (bnc#925512)- disable GnuTLS support, does not build with GnuTLS 3.4.0- rsyslog 8.9.0: - omprog: add option "hup.forward" to forwards HUP to external plugins - imuxsock: added capability to use regular parser chain - new sysSock.useSpecialParser module parameter - new sysSock.parseHostname module parameter - new useSpecialParser input parameter - new parseHostname input parameter - 0mq: improvements in input and output modules - imtcp: add support for ip based bind for imtcp -> param "address" - bugfix: MsgDeserialize out of sync with MsgSerialize for StrucData - bugfix imfile: partial data loss, especially in readMode != 0 - bugfix: potential large memory consumption with failed actions - bugfix: omudpspoof: invalid default send template in RainerScript format - bugfix: size-based legacy config statements did not work properly on some platforms, they were incorrectly handled, resulting in all sorts of "interesting" effects (up to segfault on startup) - build system: added option --without-valgrind-testbench ... which provides the capability to either enforce or turn off valgrind use inside the testbench. Thanks to whissi for the patch. - rsyslogd: fix misleading typos in error messa - remove upstreamed rsyslog-8.8.0-nonvoid-function-return.patch- rsyslog 8.8.0: - omkafka: add support for dynamic topics and auto partitioning - imtcp/imptcp: support for broken Cisco ASA TCP syslog framing - omfwd: more detailled error messages in case of UDP send error - TLS syslog: enable capability to turn on GnuTLS debug logging - bugfix: $AbortOnUncleanConfig did not work - improve rsyslogd -v output and error message with meta information - bugfix imtcp: octet-counted framing cannot be turned off - bugfix: build problems on Illuminos - bugfix: invalid data size for iMaxLine global property - bugfix: negative values for maxMessageSize global parameter were permitted - add upstream patch rsyslog-8.8.0-nonvoid-function-return.patch to fix compiler warnings/errors- rsyslog 8.7.0: - add message metadata "system" to msg object this permits to store metadata alongside the message - imfile: add support for "filename" metadata this is useful in cases where wildcards are used - imptcp: make stats counter names consistent with what imudp, imtcp uses - added new module "omkafka" to support writing to Apache Kafka - omfwd: add new "udp.senddelay" parameter - mmnormalize enhancements - RainerScript "foreach" iterator and array reading support Thanks to Janmejay Singh for the patch. - now requires liblognorm >= 1.0.2 - add support for systemd >= 209 library names - BSD "ntp" facility (value 12) is now also supported in filter Note: this patch was released under ASL 2.0 (see email-conversation). - bugfix: global(localHostName="xxx") was not respected in all modules - bugfix: emit correct error message on config-file-not-found - bugfix: impstats emitted invalid JSON format (if JSON was selected) - bugfix: (small) memory leak in omfile's outchannel code - bugfix: imuxsock did not deactivate some code not supported by platform - includes changes from 8.6.0: - configuration-setting rsyslogd command line options deprecated - new and enhanced plugins for 0mq. These are currently experimantal. - empty rulesets have been permitted. They no longer raise a syntax error. - add parameter -N3 to enable config check of partial config file Use for config include files. Disables checking if any action exists at all. - rsyslogd -e option has finally been removed It is deprectated since many years. - testbench improvements - testbench is now by default disabled - add new RainerScript functions warp() and replace() - mmnormalize can now also work on a variable - new property date options for day ordinal and week number - remove --enable-zlib configure option, we always require it - slight source-tree restructuring: contributed modules are now in their own ./contrib directory. The idea is to make it clearer to the end user which plugins are supported by the rsyslog project (those in ./plugins). - bugfix: imudp makes rsyslog hang on shutdown when more than 1 thread used - bugfix: not all files closed on auto-backgrounding startup - bugfix: typo in queue configuration parameter - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imuxsock: possible segfault when SysSock.Use="off" - bugfix: RainerScript: invalid ruleset names were accepted - bugfix: some module entry points were not called for all modules - bugfix omlibdbi: connection was taken down in wrong thread - imttcp was removed because it was an incompleted experimental module - pmrfc3164sd because it was a custom module nobody used - omoracle was removed because it was orphaned and did not build/work for quite some years and nobody was interested in fixing it - includes changes from 8.5.0: - imfile greatly refactored and support for wildcards added - PRI-handling code refactored for more clarity and robustness - ommail: add support for RainerScript config system [action() object] - refactored the auto-backgrounding method - make gntls tcp syslog driver emit more error messages - bugfix: imfile did not complain if configured file did not exist - bugfix: build failure on systems which don't have json_tokener_errors - imgssapi: log remote peer address in some error messages - includes changes from 8.4.3: - ommail: minor bugfixes & improvements - bugfix imkmsg: infinite loop on OpenVZ VMs - bugfix: typo in queue configuration parameter made parameter unusable - bugfix: unitialized buffer off-by-one error in hostname generation - bugfix imfile: segfault on startup in "inotify" mode - bugfix imfile: could make rsyslog exit in inotify mode - bugfix: rsgtutil sometimes crashed in verify mode if file did not exist - bugfix imklog: pri was miscalculated - bugfix: imjournal did not build properly - bugfix: mmcount did no longer build - bugfix imuxsock: possible segfault when SysSock.Use="off" - rsyslog Version 8.5.0 fixed bsc#992146- set file permissions only on first install [boo#899316]- Changed BuildRequires dependencies for SLES11SP3 - BuildRequires: libjson-c-devel - BuildRequires: libestr-devel - BuildRequires: liblogging-devel - BuildRequires: librelp-devel - BuildRequires: libee-devel - BuildRequires: liblognorm-devel - BuildRequires: libuuid-devel- fix shebang of rsyslog-service-prepare script/bin/sh/bin/sh/bin/sh/bin/shrsyslog-module-guardtimeh01-ch4a 1731369258  !"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNO8.2306.0-150400.5.33.18.2306.0-150400.5.33.18.2306.0-150400.5.33.1 8.38.0 rsyslog.confrsyslog.dNetworkManager.fruleacpid.frulefirewall.fruleremote.confrsyslogadditional-log-sockets.confrsyslogdjournald.conf.d30-rsyslog.confrsyslog.servicersyslogfmhash.sofmhttp.soim3195.soimfile.soimjournal.soimklog.soimkmsg.soimmark.soimpstats.soimptcp.soimtcp.soimudp.soimuxsock.solmnet.solmnetstrms.solmnsd_ptcp.solmregexp.solmtcpclt.solmtcpsrv.solmzlibw.sommanon.sommcount.sommexternal.sommfields.sommkubernetes.sommpstrucdata.sommrfc5424addhmac.sommrm1stspace.sommsequence.sommutf8fix.soomhttp.soomjournal.soommail.soomprog.soomruleset.soomstdout.soomtesting.soomuxsock.sopmaixforwardedfrom.sopmciscoios.sopmcisconames.sopmlastmsg.sopmnormalize.sopmnull.sopmpanngfw.sopmsnare.sorcrsyslogrsyslog-service-preparersyslogdapparmorextra-profilesrsyslog.dusr.sbin.rsyslogdrsyslogAUTHORSChangeLogREADMEsysconfig.syslog-rsyslogrsyslogCOPYINGCOPYING.ASL20COPYING.LESSERrsyslog.conf.5.gzrsyslogd.8.gzrsyslog/etc//etc/rsyslog.d//run//run/rsyslog//sbin//usr/lib/systemd//usr/lib/systemd/journald.conf.d//usr/lib/systemd/system//usr/lib64//usr/lib64/rsyslog//usr/sbin//usr/share//usr/share/apparmor//usr/share/apparmor/extra-profiles//usr/share/doc/packages//usr/share/doc/packages/rsyslog//usr/share/fillup-templates//usr/share/licenses//usr/share/licenses/rsyslog//usr/share/man/man5//usr/share/man/man8//var/spool/-fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -gobs://build.suse.de/SUSE:Maintenance:36408/SUSE_SLE-15-SP4_Update/657554614feee3d3736d2d485639bcf9-rsyslog.SUSE_SLE-15-SP4_Updatedrpmxz5x86_64-suse-linux  !"#$%&'()*+,-./012345677ASCII textdirectoryemptyELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=efd85457bce706e26fa4cc03400e023ff5b0934a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=253f8c4e442b59c7b7a5344f6c91a8dc50945671, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=479dc5b64d510dac614b470d683e72f9101aaa43, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f64e1cd358c43a77a32efdb148f30cb2f5a74583, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=2b53a3b2c5cef29812cb08574b47fda2e506c6cf, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=213cf558d81085bcc4a2b9d05f69a677129afee8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d1b43d6935537e097e285e4cbb4124b940a5ae48, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=dcbb31535c14a44ad79335a0819435980cefaaf4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=317c65f2476ef51ea2e17083b5e879bb602c5f00, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=96a59c426154c77751ad54a930c59166fdbccc09, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4241f1054227f05cbf82a35bb87a3fcc8a237c27, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f5902613a98855195ff455f423a01af79468efe, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ca2f3620dc2740d3f52d1d63bd7534194179c4c4, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=7f018c2da55a772991bce71155859da4b7f1caba, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a4c9ee195a5eef6e59d7bb559094b526c1b749b9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=05a35a77ef127a0dd3b89f3ea90fc894d4f0af92, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4c15af9e1c14dcd235a79289602205168594c1ac, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=210d795fca6c392fa3e43be7c924de4f92de1e39, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=586d26cd3aceb1bf2fa4b073dbf29b3553720e5e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=f85d28f582f3ca95b69ba9ec21849e665e22205d, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=a7b3807331a8cebe0cf5f5389ed3dd7e1333f067, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=75e0ff6fc9c34448446e8a7fbbaeabd605db3e3f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=91ece0cd23b4502fe37f7e4be6e0389c20baf8a8, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=acfe9df2f674a34f7c54f8d9aa09e1b96a9c8903, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b9364ba672d2be179564e680af7e9b188ac11b3c, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1def78cc244e1c3fc640404e37852c43279ffbef, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=520ce5971f568fea4238090a3a7941a2b10b106f, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=d65b2fd4040da7cf26a8f915f2aed194650573cd, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=4763d6d3951d34f6240c70b68d1609c081c0b03a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=65bb4879e49510d82586af3be14e31c958fd7848, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=39ea04302ad00ea753a8d96dcf620e3053bafaef, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8036a50ffa4036e52273f7ff6d789ae94704e840, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=eea978180350f7d1b32ad2e5ec65c14d424dfb8a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=b4b88b593907be9ae1675695e6808aae1718e54e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ded19655d496ae83eab217ac764ef8937e2c5f8a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=8b880f7ea31600ce42ea8cebebea989f882d1b50, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=aa055925ed1ca818b779424ec19abf7d5ca08878, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=073194990a294d4686593db1822ae862502efd9a, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=ecdc6aa015ef6c4b34f415b1088ab0d634ff01ad, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=5bb99d94bcb4fca2c0129c438bd710abaa71b6c7, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=893cff2ac29e14080f054f50d7a32ea5655e0ff9, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=1eb94bd288ab52bf3e4f3729e3c9718a2be310cb, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=3cd496ba879ab1faae750f7182d8a00da2c57e48, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=06cefa45609a87dfbefd52c6a1870761c2956a34, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=71242b7e74a97bd5da3fdb0cecda505ede408f3e, strippedELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, BuildID[sha1]=6b613b994c2822397a259bc3b49942f51fc20112, strippedBourne-Again shell script, ASCII text executableELF 64-bit LSB shared object, x86-64, version 1 (SYSV), dynamically linked, interpreter /lib64/ld-linux-x86-64.so.2, BuildID[sha1]=c0e7df0b85712f60fc975bca6079f1476895bd5b, for GNU/Linux 3.2.0, strippedC source, ASCII textUTF-8 Unicode textASCII text, with very long linestroff or preprocessor input, ASCII text (gzip compressed data, max compression, from Unix) %*-19<CIOSZ^cimsvz~ RRR R RRRR RRR R RRRRRRRR RR RRRRRR,R+R*R RRRRRR RRRRR RRR RRRR RRR RRRRR RRR RR RRRRR RR RRRR RRR RRR RRRR RRR RRRR RRRR R RRRR RRRRRR RRR/R RR RRRR RRR RRRR RRRR R RRRRR!RR RRRR RRRRRR RRR RRR RRR R RRRRR R+R RRR*R RRRR RRRR RRR RRR RRRR RRR RRR RRR RRR RRRR RRR!RR RRR RRR RRR RR#RR.R+R%R(R'R&RR RRRRRRRRR/R$RR"RRR*R-R i{ۙ/usr/bin/systemctl --marked reload-or-restart ||:/bin/shsystemdsystemdsystemd-sysvcompatutf-89f560c5d7bba8312839f5f017c95c03698c122b07fb19f30467b6e1220e209db?7zXZ !t/A]"k%z.kgWE ljҚko@ʋADG.ȜKZ]ձS$| mNef[~z{29# `t*-=^Dֺ+TwN)jrr@F;txG˚.C 4{7F3XˆDR%7 l ]B"7ӹac> DkhAn[ Ssk.$h2ڒUJsnҥÛ{DKs[C0{8c?0LQJgg>F>T;5K5mS勰  LJ'6 ZvF`:/e @)͛}6Zrw3$q 4*"FlȨ׷zɟ?4څip3}1G 7uNŧB E|=^g /Dx!q٪V[:Hաݞұ}+YFݑ靇Uds7iw{w9pџ(FV^ QKxR,4?~j>0T_q|5 S$B2+t# L{K YmVdWuzb3y, !R"}aaђ4^bTD.T[ER!TrŨě#& ỲlN/bΦ`l.hM&1:8*ݔ3+N()0Fuxjo ;h|;&jv0D䑜f%ܢҴMޝ:\ %;6E*Sq'MiuKYROFPEyup8iG>qmEK|6vWͤ._u$LĖvɹ ͋կxP2k>X>xN<  O=EEefUbs}'a}+0K@*q.K|,(29tYp\tx&DTřA`Ts0!s9Og]EkD*m3qYKX.=̦"PpC;oņ0Iq< Fy˺C:߲FJ\'@ª|۳?=s[ /UF;BHdC F:d˴}549O0_$='NR<9 ~^|V>uFo2;x߃.7Ȩ M\;|X~ ! /u?1`̀l%F饚b_ge5r4>3xDKBozU$< &9RٌO5cq~fΦfw鋧 JkKy5BJO ;C]*QX5!ٖ7nlL N(`Od N|*@@%sPА$T24dks;ŖV?U{٣# v,;܎g&xWVc.i_QH㕐zo79XJ\|f^AW=>6SƝэũ4\*Pa2^$l,oڰ95:TfÓ92Wys *=Kz>ekK#^{E8 sƅyN+ET=k]>ID`hhVE,-=[v_ǡR?:OӶtJscZ m;1#J!6h֑>DYC…Yl5N:b֠ÌHSo1@R53MܫL+12mp<wbWNL@z(Q*SRmlce600+hhpž Mzn h$M 9YmbGt%g2"vǝXI, 9]vQ Uy-H{[  r`|t>Iѩo."?VWvld'fx)缺6Ŷ8x+(iH{?(s$ q Κӂ쒑B=W7S# m`cpI)q`egOfH i)>eqTiqpT/\е2 i^#z/YLq:f*vI֎8-"V&fBNG߄|B g?NW՗ۤkMBUYAE9{tFM!aP s7{Wb?b_$CgMNݻpD+Y+X4Caaa+-^oVֺS]0y4Hg/K #Д\- j #i^w[il+tClς%赱Ζ=J.`k0j1I+bwWSᄀica!&o#D]FЫ4 nP)2n5w0`L! s9Zva3>b"Or1,E[SW0x24)CE> Γ)B%i 7K^i 0FP$Bj5?h3 G>ZnscFESs5)q6dA"r >yZV/o+qĔqo ë4{4 rی nh5WSM0~mҸ@;H8R;x;V-.q Ɣ67ko ٛA7YĶ[Ej>#g#3\no:͚I}4xY|Cd?AoF?,=^Y%ntZDzoYH~W&&vJ TH4ZZ?.ZD퍿OE.@e'~Q3`n9z"QBd[t=l-3wtf)q#o2,Htq9{P,9 \&o/p BcLU2D|%} 1d(vf `q -`_жm L=Qv!dC1jDni"\]*jEc`sc)+Z-"^,ػ=tk2Y .`(}΃]s^&{ ic!I=mI`t3pˡ${A2>"ۘko}B P}\x, T/m5*a h2]?dÍZWS{Ǝ{LLMCU?G P9J 1cjAJO|țX10J^Fuv;o<9{r!}`0+;ݑn2H/MQU](>)@%ssX[R|;b]q]N(f{[ &AُҲr9 6L}vمƈ^u* 8/Ud$_li.4G-~94 @'(&<^hl7y?\,OY"^AΊ3oJ|tWe"|/$UH8=YQ]G ?L düwcEԢ*"@ALzw=_Ty.Z+8EWa˯wUAU?'^+td+r_䖩(8偢X\ 59c- +ľXwVf}B-m[txvpn0F~^kpťY߃$npK_2MNŒnobu1Gl6Lc.p:6$5J$ҡy }ˑ^%l _ܣCaY@ k6 '[]a_t&a߬HO#[-(Ie2ODtp_3l7-Вt>mR0CvIB V"-_Sc@A394BonhC$G sS+$t7Aru#^D&C匘 }QS)|םUtX^:C۶V/Vv+#]aRiSxpVQo(ٍVavOgތM @ {jq|[J+Z9O+Y)@oZ(Kw% "㠥B֎Y? :lܫXudx}+$={[rԶBI,9X+bq#0Hi>GI&/[Jt)©"nQ-d])f[WO cRv}YuP[EuMY0qi_WE}(YPcWÛSB˴?Pc*{NMkvރtC 6s #HߒiY1t'( ʐpz"{'Y7[x82؀%דڧB|BKW{wgT(64lQ9Zf2~wkeE52I>1o@5wcrjH޶c$LVXϲ rbT eU_/-H$b($o{>F(3c\r־ Cx=ƪL:\E-^͸ C |JvTq8.<O|  n!,>?20=,3 LK:͟L>Hy5~=r~T| h<58W:yHq;__۵/Tҧ-K]icsnsSV93f9#b M]m$Bv:YRf1ͺ ňKτ/JAy}O^֣̿LPy^f8BN5AӜuEAAJ;[ Y(]@Ý`2boB1 Eޡ'\JsK -ZO\Rx{{LLs%Pbeun-dT -F} "Y"R~*O5yU:-`RD^MM3h>Ab+!8uP͹taX;+n{TZbҪ"=(R=c eT+dP':f2(G&%j͐uYuAc'ϼ*&W; A+`AHl|aҨ)e()<,xpiZH*ͨURUSͧY87޿n1 Ŕ0 q@ZI䌘ܹ18^.9>D*=R[IfKkS>RFp.'}A3RIŜxy|9G& @&ҙy$N)414 YZ