December 2007 - syslog-ng-announce

New version of The syslog-ng Administrator Guide has been released
by documentation 21 Dec '07

21 Dec '07

------------------------------------------------------------------------------ DOCUMENT : The syslog-ng Administrator Guide VERSION : 1.0.14 SUMMARY : New release DATE : Dec 21, 2007 ------------------------------------------------------------------------------ DESCRIPTION: An updated version of The syslog-ng Administrator Guide is available for download. DOWNLOAD: * BalaBit Documentation Page http://www.balabit.com/support/documentation/ * Direct link to the PDF version: http://www.balabit.com/dl/guides/syslog-ng-v2.0-guide-admin-en.pdf * HTML version: http://www.balabit.com/dl/html/syslog-ng-admin-guide_en.html/index.html

1 0

ZSA-2007-029: syslog-ng Denial of Service
by Balazs Scheidler 17 Dec '07

17 Dec '07

-------- Z o r p S e c u r i t y A d v i s o r y ( Z S A ) ------------ PACKAGE : syslog-ng, syslog-ng-premium-edition AFFECTED VERSION : <= 2.0.6, 2.1.8 FIXED : 2.0.6, 2.1.8 SUMMARY : Denial of Service TYPE : remote AFFECTED : all platforms ZSA-ID : ZSA-2007-029 DATE : Dec 14, 2007 ----------------------------------------------------------------------------- DESCRIPTION: Oriol Carreras has discovered a security vulnerability in syslog-ng, the multi-platform syslog-replacement application developed by BalaBit IT Security. BACKGROUND: Earlier versions of syslog-ng Open Source Edition and syslog-ng Premium Edition were vulnerable to a possible Denial of Service. The latest release (2.0.6 for syslog-ng, 2.1.8 for syslog-ng Premium Edition) fixes a segmentation fault which occurred when the timestamp of the incoming messages did not end with a space character (NULL pointer dereference). This is an easy Denial of Service possibility. Apart from the Denial of Service, no further exploits are known to be possible. FURTHER INFORMATION For further information on syslog-ng, visit http://www.balabit.com/network-security/syslog-ng/ or download the documentation of syslog-ng from http://www.balabit.com/support/documentation/ SOLUTION: We recommend that you update the affected packages immediately, or apply the patch referenced below: http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commitdiff;h=3126ebad217… DOWNLOAD: If you are a syslog-ng Open Source Edition user, download the source of the latest release from: http://www.balabit.com/downloads/files/syslog-ng/sources/2.0/src/ If you are a syslog-ng Premium Edition user, or have binary subscription for syslog-ng Open Source Edition, download the latest binaries from: http://www.balabit.com/downloads/files/syslog-ng/binaries/premium-edition/ OR, if you have a platform that is supported by apt-get, use the following apt sources to fetch the latest releases: Debian GNU/Linux ---------------- etch: deb https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ debian-etch/syslog-ng-2.1 syslog-ng-pe RedHat Enterprise Linux ----------------------- RHEL-4 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ rhel-4/syslog-ng-2.1 syslog-ng-pe SUSE 10 ------- SUSE 10.0 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ suse-10.0/syslog-ng-2.1 syslog-ng-pe SUSE 10.1 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ suse-10.1/syslog-ng-2.1 syslog-ng-pe HTTP can also be used in the place of HTTPS If your version of apt-get does not support the HTTPS protocol. When using plain HTTP, the username and password will not be encrypted.

1 1

syslog-ng Premium Edition 2.1.8 has been released
by devel＠balabit.hu 03 Dec '07

03 Dec '07

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 2.1.8 SUMMARY : new stable release DATE : Dec 3, 2007 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (2.1.8) has been released. For latest fixes in the 2.1.x branch you are recommended to upgrade to this version. CHANGES: 2.1.8 Tue, 27 Nov 2007 10:49:31 +0100 IMPORTANT NOTES: * This version of syslog-ng contains a fix for a possible Denial of Service, therefore it is strongly recommended to upgrade to this release. Bugfixes: * Fixed the reversed field order for SQL destinations, when the configuration file contains an explicit list of fields. * Fixed a possible segmentation fault for IPv6 destinations. * Fixed the scope id resolution for link-local IPv6 addresses. * Fixed a problem in handling messages which lacked explicit timezone information, but the administrator specified a timezone for the messages. * Fixed some minor memory leaks in configuration reloads. * Fail the configuration initialization for an unresolvable domain name, instead of falling back to 0.0.0.0. * Fixed a segmentation fault which occurred when the timestamp of the incoming messages did not end with a space character (NULL pointer dereference). This is an easy Denial of Service possibility. * Corrected program name parsing in incoming messages. Other changes: * Added the --seed command line option that allows the administrator to seed the PRNG using a file, if the operating system does not provide a /dev/random device. DOWNLOAD: Download the latest binaries from: http://www.balabit.com/downloads/files/syslog-ng/binaries/premium-edition/ OR, if you have a platform that is supported by apt-get, use the following apt sources to fetch the latest releases: Debian GNU/Linux ---------------- etch: deb https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ debian-etch/syslog-ng-2.1 syslog-ng-pe RedHat Enterprise Linux ----------------------- RHEL-4 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ rhel-4/syslog-ng-2.1 syslog-ng-pe SUSE 10 ------- SUSE 10.0 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ suse-10.0/syslog-ng-2.1 syslog-ng-pe SUSE 10.1 rpm https://USERNAME:PASSWORD@apt.balabit.com/syslog-ng/premium/ suse-10.1/syslog-ng-2.1 syslog-ng-pe HTTP can also be used in the place of HTTPS If your version of apt-get does not support the HTTPS protocol. When using plain HTTP, the username and password will not be encrypted.

1 0