<div dir="ltr"><div><div>Hi,<br>Upgrade nodes for packagres from beta1 -> beta2 (this is a changelog for my SUSE packages):<br>- add back man pages<br>- re-enable smp build<br>- follow geoip modul name change (tfgeoip -> geoip-plugin)<br></div></div>Bye,<br></div><div class="gmail_extra"><br clear="all"><div><div class="gmail_signature"><div dir="ltr">Peter Czanik (CzP) <<a href="mailto:peter.czanik@balabit.com" target="_blank">peter.czanik@balabit.com</a>><br>BalaBit IT Security / syslog-ng upstream<br><a href="http://czanik.blogs.balabit.com/" target="_blank">http://czanik.blogs.balabit.com/</a><br><a href="https://twitter.com/PCzanik" target="_blank">https://twitter.com/PCzanik</a><br></div></div></div>
<br><div class="gmail_quote">On Fri, Jun 26, 2015 at 3:28 PM, Budai, László <span dir="ltr"><<a href="mailto:laszlo.budai@balabit.com" target="_blank">laszlo.budai@balabit.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr"><h1>3.7.0beta2</h1><p style="font-size:12.8000001907349px">This is the second beta release of the upcoming syslog-ng OSE 3.7<br>branch.</p><p style="font-size:12.8000001907349px">Changes compared to the previous alpha release:</p><h2>Features</h2><ul style="font-size:12.8000001907349px"><li style="margin-left:15px"><p>Added a geoip parser.</p></li><li style="margin-left:15px"><p>ssl_options inside tls() extended with the following set:<br>no-sslv2, no-sslv3, no-tlsv1, no-tlsv11, no-tlsv12</p></li><li style="margin-left:15px"><p>minimal libriemann-client version bumped from 1.0.0 to 1.6.0</p></li><li style="margin-left:15px"><p>TLS support added to Riemann destination</p></li><li style="margin-left:15px"><p>timeout() option added to Riemann destination</p></li></ul><h2>Fixes</h2><ul style="font-size:12.8000001907349px"><li style="margin-left:15px"><p>SyslogNg.jar removed from the release tarball.</p></li><li style="margin-left:15px"><p>When the configured host was not available during the initialization of<br><code>afsocket</code> destination syslog-ng just didn't start. From now, syslog-ng<br>starts in that case and will retry connecting to the host periodically.</p></li><li style="margin-left:15px"><p>When a not writeable file becomes writeable later, syslog-ng recognize it<br>(with the help of reopen-timer) and delivers messages to the file without<br>dropping those which were received during the file was not available.</p></li><li style="margin-left:15px"><p>Fixed a configure error around libsystemd-journal.</p></li><li style="margin-left:15px"><p><code>--disable-python</code> option and other Python related fixes addded to <br>configure</p></li><li style="margin-left:15px"><p>Retries fixed in SQL destination. In some circumstances when<br><code>retry_sql_inserts</code> was set to 1, after an insertion failure all incoming<br>messages were dropped.</p></li><li style="margin-left:15px"><p>Added DOS/Windows line ending support in config.</p></li><li style="margin-left:15px"><p>Parallel build is supported for Python and Java destination drivers.</p></li><li style="margin-left:15px"><p>Fixed compilation failure on OpenBSD</p></li><li style="margin-left:15px"><p>Memory leak around reload and internal queueing mechanism has been fixed.</p></li><li style="margin-left:15px"><p>AMQP connection process fixed.</p></li><li style="margin-left:15px"><p>Fixed a potential abort when the localhost name cannot be detected.</p></li><li style="margin-left:15px"><p>Security issue fixed around $HOST.<br>Tech details:<br>When the name of the host is too long, the buffer we use to format the<br>chained hostname is truncated. However snprintf() returns the length the<br>result would be if no truncation happened, thus we will read uninitialized<br>bytes off the stack when we use that pointer to set $HOST<br>with log_msg_set_value().<br><br>There can be some security implications, like reading values from the stack<br>that can help to craft further exploits, especially in the presense of<br>address space randomization. It can also cause a DoS if the hostname length<br>is soo large that we would read over the top-of-the-stack, which is probably<br>not mmapped causing a SIGSEGV.</p></li><li style="margin-left:15px"><p>Journal entries containing name-value pairs without '=' caused syslog-ng<br>to crash. Instead of crashing, syslog-ng just drop these nv pairs.</p></li></ul><h2>Credits</h2><p style="font-size:12.8000001907349px">syslog-ng is developed as a community project, and as such it relies<br>on volunteers, to do the work necessarily to produce syslog-ng.</p><p style="font-size:12.8000001907349px">Reporting bugs, testing changes, writing code or simply providing<br>feedback are all important contributions, so please if you are a user<br>of syslog-ng, contribute.</p><p style="font-size:12.8000001907349px">We would like to thank the following people for their contribution:</p><p style="font-size:12.8000001907349px">Alex Badics, Andras Mitzki, Balazs Scheidler, Bence Tamas Gedai,<br>Fabien Wernli, Gergely Nagy, Gergo Nagy, Gyorgy Pasztor, Istvan Adam Mozes,<br>Laszlo Budai, Peter Czanik, Robert Fekete, Tibor Benke, Viktor Juhasz,<br>Zoltan Pallagi.</p><p style="color:rgb(102,102,102)">—<br><a href="https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.0beta2" target="_blank">View it on GitHub</a>.<img alt="" height="1" width="1"></p></div>
<br>______________________________________________________________________________<br>
Member info: <a href="https://lists.balabit.hu/mailman/listinfo/syslog-ng" rel="noreferrer" target="_blank">https://lists.balabit.hu/mailman/listinfo/syslog-ng</a><br>
Documentation: <a href="http://www.balabit.com/support/documentation/?product=syslog-ng" rel="noreferrer" target="_blank">http://www.balabit.com/support/documentation/?product=syslog-ng</a><br>
FAQ: <a href="http://www.balabit.com/wiki/syslog-ng-faq" rel="noreferrer" target="_blank">http://www.balabit.com/wiki/syslog-ng-faq</a><br>
<br>
<br></blockquote></div><br></div>