We have just released LogAnalyzer 5.0.1, the current line from the rsyslog/loganalyzer project on GitHub. Maintenance note from upstream: work previously earmarked as 4.1.13 (Docker, PHP 8 tooling, and related documentation) is consolidated into this release.
This release has the following highlights:
Version 5.0.1, 2026-05-06 (see GitHub release v5.0.1 for full detail)
Security fixes and hardening
- CVE-2023-36306: build redirect and page URLs using
SCRIPT_NAMEinstead ofPHP_SELFto mitigate XSS via crafted paths. - CVE-2023-34600: harden authenticated admin paths against SQL injection; improved escaping for quoted SQL literals.
- LDAP: stop persisting LDAP user passwords in MySQL (bind-only semantics); scrub legacy local password hashes after successful LDAP login.
- Frontend: jQuery 1.12.4 to 3.7.1 and jQuery UI 1.11.1 to 1.14.1 for upstream security fixes.
Log viewing, search, charts, and export
- Syslog PRI/level: recognise TRACE, level-based (and optional row) colouring; tighter defaults for empty searches.
- Filters: quoted segments stay literal; numeric ranges; clearer parsing.
- Pagination: upper bound on rows per page;
datelastxclarified for compatibility. - Charts and export: improved defaults, trace-aware export, admin ViewColoredCells option.
Relative dates, export, duplicate suppression (reworked implementation)
Parsers and runtime
- Syslog-ng parsing refresh.
- Install/runtime checks require PHP 8.1+; PHP 8.3 compatibility improvements; bundled html2fpdf fixes.
Docker and documentation
- PHP 8.2 + MySQL 8 stacks, compose variants (consumer, development, Playwright/E2E), optional sample logs and env-driven config; handbook on GitHub Pages.
CI and quality
- GitHub Actions: PHP lint, Composer + PHPUnit, MkDocs, Playwright E2E; optional tarball workflow on tags.
Download and sources:
As always, feedback is appreciated.