CVE-2021-36159

J0WI authored 3 years ago and Kevin Daudt committed 3 years ago

CVE-2021-36222

J0WI authored 3 years ago and Leo committed 3 years ago

- CVE-2021-22922
- CVE-2021-22923
- CVE-2021-22924
- CVE-2021-22925

2.9.11 lacked fuzz.h, which broke the test suite. Upgrade to 2.9.12 to
fix that again.

Fixes ftbfs, fuzz.h is missing from source.

See #12859

- use rtpproxy r flag to force RTP to follow SDP
- add ptime support

Henrik Riomar authored 3 years ago and Leo committed 3 years ago

We must include config files before the standard rules or else
the standard logs will be full with data the user have configured
filters for.

This problem was introduced in:
 5364bae3 main/rsyslog: move config loading behind module loading to allow module directives in config files

Duncan Bellamy authored 3 years ago and Leo committed 3 years ago

* add -s to CFLAGS and CPPFLAGS so does not run out of space when building

See: #12811

fixes CVE-2021-29157 and CVE-2021-33515
remove 0001-oauth2-jwt-Use-int64_t-instead-time_t-for-portabilit.patch,
fixed upstream
cherry-pick test-imap-client-hibernate.patch from 3.14-stable to  fix tests
add fix-libssl_iostream_openssl.patch, from upstream author