August 2012 - syslog-ng-announce

syslog-ng Premium Edition 4 LTS (4.0.5a) has been released
by devel＠balabit.hu 29 Aug '12

29 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 LTS (4.0.5a) SUMMARY : new stable release DATE : Aug 28, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (4 LTS (4.0.5a)) has been released. For a full description on stable and feature releases, see Section 2.16. Stable and feature releases of syslog-ng PE in The syslog-ng Premium Edition 4 LTS (4.0.5a) Administrator Guide. CHANGES: 4 LTS (4.0.5a) Tue, 28 Aug 2012 10:19:32 +0200 Security updates: CVE-2012-2110, CVE-2012-2131, CVE-2006-7250 The documentation of syslog-ng 4 LTS, including the installation and user guides is available in PDF, HTML, and single-page HTML format at: http://www.balabit.com/support/documentation/ UPGRADE: For details on upgrading and possible upgrade paths, read Section 3.5., Upgrading syslog-ng in the The syslog-ng Premium Edition 4 LTS Administrator Guide: http://www.balabit.com/support/documentation/syslog-ng-pe-v4.0-guide-admin-… Kind Regards, BalaBit IT Security For details on the fixed issues see our issue tracking page at http://www.balabit.com/mybalabit/fixed_bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/upg… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 LTS (4.0.5a) Administrator Guide at: http://www.balabit.com/support/documentation/ Kind Regards, BalaBit IT Security

1 0

syslog-ng Premium Edition 4 F2 (4.2.3a), has been released
by devel＠balabit.hu 29 Aug '12

29 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.3a), SUMMARY : New syslog-ng Premium Edition feature release DATE : Aug 28, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 4 F2 (4.2.3a), has been released. For latest fixes in the 4 F2 (4.2.x) branch you are recommended to upgrade to this version. CHANGES: 4 F2 (4.2.3a) Tue, 28 Aug 2012 10:19:32 +0200 Security updates: CVE-2012-2110, CVE-2012-2131, CVE-2006-7250 Kind Regards, BalaBit IT Security DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 F2 (4.2.3a), Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security

1 0

syslog-ng 3.3.6 has been released
by devel＠balabit.hu 27 Aug '12

27 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.3.6 SUMMARY : new stable release DATE : Aug 27, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.3.6) has been released. For latest fixes in the 3.3.x feature branch you are recommended to upgrade to this version. CHANGES: 3.3.6 Fri, 10 Aug 2012 11:00:00 +0200 Highlights ========== This release is a bug-fix release mostly, with a few minor - yet useful - feature enhancements. The most important one is that the patched ivykis syslog-ng 3.3 shipped with until now is no more. We build against upstream ivykis now (still included for convenience, though). Other highlights include much improved systemd support, and an enhancement to the @include feature, and many bugfixes. See below for more information! Features ======== * The system() source automatically detects systemd, and defines the proper log socket accordingly. If the system() source is not used, a workaround to use the systemd supplied log socket instead of /dev/log was applied. This kicks in if syslog-ng is running under systemd, and its config version is 3.4 or less. * The @include statement now accepts globs, allowing one to limit what gets included, and limit it to files matching "*.conf", for example. Bugfixes ======== * When using spoof-source, the destination address is now correctly resolved again after a SIGHUP. * When the supervisor receives a SIGHUP, it will not terminate anymore, but ignore it. * The fsync(yes) functionality was restored, and will now do what it is supposed to do. * A memory corruption was fixed in the DNS cache when used in threaded mode and dns-cache-hosts() is used. * The program() destination now correctly closes the standard input of the running program when syslog-ng is being reloaded (as opposed to only sending a signal). * Incorrect encoding of data caused UDP and unix-dgram() receives to be erroneously closed, so no further data would be received. This has been fixed. Incorrect encoding of incoming data causes the connection for connection oriented transports (like tcp() and unix-stream()) to be closed, but the same condition is ignored for datagram oriented transports (like udp() or unix-dgram()). * Fixed a possible NULL dereference in patterndb, when an action was used without a context-scope. * The max-connections() setting now works correctly accross reloads, and does not reset the counter. Other changes ============= * On systems that have utmpx(5), syslog-ng will prefer and use that over the older utmp(5). This means that there is no more patching needed for systems like FreeBSD 9, which only support utmpx. Credits ======= syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Alex Zimnitsky <avz(a)dagotel.ru> Alexander Komyagin <komyagin(a)altell.ru> Balazs Scheidler <bazsi(a)balabit.hu> Cary Taylor <ctaylor(a)ptgi.com> EgonB <egon(a)local.ee> Evan Rempel <erempel(a)uvic.ca> Gergely Nagy <algernon(a)balabit.hu> Imre Lazar <imre(a)balabit.hu> Jose Pedro Oliveira <jpo(a)di.uminho.pt> Lennert Buytenhek <buytenh(a)wantstofly.org> Mads <mads(a)ab3.no> Mark Ulmer <mark.ulmer(a)apollogrp.edu> Mark Wooding <mdw(a)distorted.org.uk> Marvin Nipper <marvin.nipper(a)stream.com> Patrick Hemmer Peter Czanik <czanik(a)balabit.hu> Sandor Geller <wildy(a)muhelybt.hu> Viktor Juhasz <jviktor(a)balabit.hu> DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0