We have just released LogAnalyzer 5.0.1, the current line from the rsyslog/loganalyzer project on GitHub. Maintenance note from upstream: work previously earmarked as 4.1.13 (Docker, PHP 8 tooling, and related documentation) is consolidated into this release.

This release has the following highlights:
Version 5.0.1, 2026-05-06 (see GitHub release v5.0.1 for full detail)

Security fixes and hardening

  • CVE-2023-36306: build redirect and page URLs using SCRIPT_NAME instead of PHP_SELF to mitigate XSS via crafted paths.
  • CVE-2023-34600: harden authenticated admin paths against SQL injection; improved escaping for quoted SQL literals.
  • LDAP: stop persisting LDAP user passwords in MySQL (bind-only semantics); scrub legacy local password hashes after successful LDAP login.
  • Frontend: jQuery 1.12.4 to 3.7.1 and jQuery UI 1.11.1 to 1.14.1 for upstream security fixes.

Log viewing, search, charts, and export

  • Syslog PRI/level: recognise TRACE, level-based (and optional row) colouring; tighter defaults for empty searches.
  • Filters: quoted segments stay literal; numeric ranges; clearer parsing.
  • Pagination: upper bound on rows per page; datelastx clarified for compatibility.
  • Charts and export: improved defaults, trace-aware export, admin ViewColoredCells option.

Relative dates, export, duplicate suppression (reworked implementation)

Parsers and runtime

  • Syslog-ng parsing refresh.
  • Install/runtime checks require PHP 8.1+; PHP 8.3 compatibility improvements; bundled html2fpdf fixes.

Docker and documentation

  • PHP 8.2 + MySQL 8 stacks, compose variants (consumer, development, Playwright/E2E), optional sample logs and env-driven config; handbook on GitHub Pages.

CI and quality

  • GitHub Actions: PHP lint, Composer + PHPUnit, MkDocs, Playwright E2E; optional tarball workflow on tags.

Download and sources:

As always, feedback is appreciated.

LogAnalyzer v5.0.1 released
Scroll to top