mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
52ae04257a
- CVE-2026-19654:
A unauthenticated remote peer may lead rsyslogd to crash due to a flaw
in the optional imptcp module. A crafted input sequence during
oversize-frame recovery can cause an invalid internal message length
and terminate rsyslogd. No confidentiality or integrity impact,
privilege escalation, or code execution has been identified. imtcp and
the default imptcp framing modes are not affected.
For more information, see:
- https://www.cve.org/CVERecord?id=CVE-2026-19654
- 07b3c40a5a
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Julien Olivain <ju.o@free.fr>
182 lines
5.2 KiB
Makefile
182 lines
5.2 KiB
Makefile
################################################################################
|
|
#
|
|
# rsyslog
|
|
#
|
|
################################################################################
|
|
|
|
RSYSLOG_VERSION = 8.2510.0
|
|
RSYSLOG_SITE = http://rsyslog.com/files/download/rsyslog
|
|
RSYSLOG_LICENSE = GPL-3.0, LGPL-3.0, Apache-2.0
|
|
RSYSLOG_LICENSE_FILES = COPYING COPYING.LESSER COPYING.ASL20
|
|
RSYSLOG_CPE_ID_VENDOR = rsyslog
|
|
RSYSLOG_DEPENDENCIES = zlib libestr liblogging libfastjson host-pkgconf
|
|
RSYSLOG_CONF_ENV = ac_cv_prog_cc_c99='-std=c99'
|
|
|
|
# 0001-imptcp-guard-regex-framing-match-at-line-start.patch
|
|
RSYSLOG_IGNORE_CVES += CVE-2026-19654
|
|
|
|
ifeq ($(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),y)
|
|
RSYSLOG_PLUGINS = imdiag imfile impstats imptcp \
|
|
mmanon mmaudit mmfields mmjsonparse mmpstrucdata mmsequence mmutf8fix \
|
|
mail omprog omruleset omstdout omuxsock \
|
|
pmaixforwardedfrom pmciscoios pmcisconames pmlastmsg pmsnare
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBRELP)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += librelp
|
|
RSYSLOG_PLUGINS += relp
|
|
endif
|
|
|
|
RSYSLOG_CONF_OPTS = --disable-generate-man-pages \
|
|
$(foreach x,$(call qstrip,$(RSYSLOG_PLUGINS)),--enable-$(x))
|
|
|
|
# Disable items requiring lognorm
|
|
RSYSLOG_CONF_OPTS += \
|
|
--disable-mmkubernetes \
|
|
--disable-mmnormalize
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBCURL)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += libcurl
|
|
RSYSLOG_CONF_OPTS += \
|
|
--enable-clickhouse \
|
|
--enable-elasticsearch \
|
|
--enable-fmhttp \
|
|
--enable-imdocker \
|
|
--enable-omhttp \
|
|
--enable-omhttpfs
|
|
else
|
|
RSYSLOG_CONF_OPTS += \
|
|
--disable-clickhouse \
|
|
--disable-elasticsearch \
|
|
--disable-fmhttp \
|
|
--disable-imdocker \
|
|
--disable-omhttp \
|
|
--disable-omhttpfs
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_CIVETWEB_LIB)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += apr-util civetweb
|
|
RSYSLOG_CONF_OPTS += --enable-imhttp
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-imhttp
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_CZMQ)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += czmq
|
|
RSYSLOG_CONF_OPTS += --enable-imczmq --enable-omczmq
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-imczmq --disable-omczmq
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_GNUTLS)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += gnutls
|
|
RSYSLOG_CONF_OPTS += --enable-gnutls
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-gnutls
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_HIREDIS)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += hiredis
|
|
RSYSLOG_CONF_OPTS += --enable-omhiredis
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-omhiredis
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBGCRYPT)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += libgcrypt
|
|
RSYSLOG_CONF_ENV += LIBGCRYPT_CONFIG=$(STAGING_DIR)/usr/bin/libgcrypt-config
|
|
RSYSLOG_CONF_OPTS += --enable-libgcrypt
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-libgcrypt
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBMAXMINDDB)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += libmaxminddb
|
|
RSYSLOG_CONF_OPTS += --enable-mmdblookup
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-mmdblookup
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBPCAP)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += libpcap
|
|
RSYSLOG_CONF_OPTS += --enable-impcap
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-impcap
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_MARIADB)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += mariadb
|
|
RSYSLOG_CONF_OPTS += --enable-mysql
|
|
RSYSLOG_CONF_ENV += ac_cv_prog_MYSQL_CONFIG=$(STAGING_DIR)/usr/bin/mysql_config
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-mysql
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_POSTGRESQL)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += postgresql
|
|
RSYSLOG_CONF_OPTS += --enable-pgsql
|
|
RSYSLOG_CONF_ENV += ac_cv_prog_PG_CONFIG=$(STAGING_DIR)/usr/bin/pg_config
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-pgsql
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_QPID_PROTON)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += qpid-proton
|
|
RSYSLOG_CONF_OPTS += --enable-omamqp1
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-omamqp1
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_RABBITMQ_C)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += rabbitmq-c
|
|
RSYSLOG_CONF_OPTS += --enable-omrabbitmq
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-omrabbitmq
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_UTIL_LINUX_LIBUUID)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_DEPENDENCIES += util-linux
|
|
RSYSLOG_CONF_OPTS += --enable-uuid
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-uuid
|
|
endif
|
|
|
|
ifeq ($(BR2_INIT_SYSTEMD)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_CONF_OPTS += \
|
|
--enable-imjournal \
|
|
--enable-omjournal \
|
|
--with-systemdsystemunitdir=/usr/lib/systemd/system
|
|
RSYSLOG_DEPENDENCIES += systemd
|
|
else
|
|
RSYSLOG_CONF_OPTS += \
|
|
--disable-imjournal \
|
|
--disable-omjournal
|
|
endif
|
|
|
|
ifeq ($(BR2_PACKAGE_LIBDBI_DRIVERS)$(BR2_PACKAGE_RSYSLOG_EXTRA_PLUGINS),yy)
|
|
RSYSLOG_CONF_OPTS += --enable-libdbi
|
|
RSYSLOG_DEPENDENCIES += libdbi-drivers
|
|
else
|
|
RSYSLOG_CONF_OPTS += --disable-libdbi
|
|
endif
|
|
|
|
define RSYSLOG_INSTALL_INIT_SYSTEMD
|
|
$(INSTALL) -m 0644 -D package/rsyslog/rsyslog.service \
|
|
$(TARGET_DIR)/usr/lib/systemd/system/rsyslog.service
|
|
endef
|
|
|
|
define RSYSLOG_INSTALL_INIT_SYSV
|
|
$(INSTALL) -m 0755 -D package/rsyslog/S01rsyslogd \
|
|
$(TARGET_DIR)/etc/init.d/S01rsyslogd
|
|
endef
|
|
|
|
define RSYSLOG_INSTALL_CONF
|
|
$(INSTALL) -m 0644 -D $(@D)/platform/redhat/rsyslog.conf \
|
|
$(TARGET_DIR)/etc/rsyslog.conf
|
|
mkdir -p $(TARGET_DIR)/etc/rsyslog.d
|
|
endef
|
|
|
|
RSYSLOG_POST_INSTALL_TARGET_HOOKS += RSYSLOG_INSTALL_CONF
|
|
|
|
$(eval $(autotools-package))
|