June 2014 - syslog-ng-announce

syslog-ng Premium Edition 5 LTS (5.0.5a) has been released
by devel＠balabit.hu 25 Jun '14

25 Jun '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 LTS (5.0.5a) SUMMARY : new stable release DATE : Jun 24, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (5 LTS (5.0.5a)) has been released. For latest fixes in the 5.0.x branch you are recommended to upgrade to this version. CHANGES: 5 LTS (5.0.5a) Tue, 24 June 2014 15:50:20 +0100 Security updates: CVE-2014-0221, CVE-2014-0224, CVE-2014-0195, CVE-2014-0198, CVE-2014-5298, CVE-2014-3470, CVE-2014-0076 For details on the fixed issues see the following OpenSSL Security Advisory: https://www.openssl.org/news/secadv_20140605.txt DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 LTS (5.0.5a) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

Upcoming syslog-ng PE releases to fix OpenSSL vulnerability
by devel＠balabit.hu 16 Jun '14

16 Jun '14

------------------------------------------------------------------------------ SUMMARY : Upcoming syslog-ng PE releases to fix OpenSSL vulnerability PACKAGE : syslog-ng Premium Edition VERSION : all versions DATE : Jun 12, 2014 ------------------------------------------------------------------------------ DESCRIPTION: OpenSSL has released updates patching 7 vulnerabilities, which may allow an attacker to decrypt or modify traffic between a vulnerable client and server, cause a denial of service condition, or remotely execute arbitrary code. All maintained syslog-ng PE versions (4LTS, 5LTS, 5F1) are affected by the following CVEs: CVE-2014-0221 CVE-2014-0224 (a.k.a the CCS Injection Vulnerability) CVE-2014-0195 CVE-2014-0198 CVE-2014-5298 CVE-2014-3470 CVE-2014-0076 A security update of the affected versions shall be released as follows: * 5.0.5a by the end of 2014Q2 * 4.0.7b in July 2014 * 5.1.1a in July 2014 As an immediate prevention against attacks based on the CCS Injection vulnerability, you should consider configuring two-way authentication for TLS-encrypted connections. Best Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng Premium Edition 5 LTS (5.0.5) has been released
by devel＠balabit.hu 11 Jun '14

11 Jun '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 LTS (5.0.5) SUMMARY : new stable release DATE : May 28, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (5 LTS (5.0.5)) has been released. For latest fixes in the 5.0.x branch you are recommended to upgrade to this version. CHANGES: 5 LTS (5.0.5) Wed, 28 May 2014 15:31:20 +0100 Fixed bugs: #31447 When reverting to old configuration, log messages are duplicated #31452 syslog-ng client spins if it cannot validate the server certificate ("certificate verify failed") #31463 Reading huge messages from file source causes memory (heap) corruption #31469 Having multiple destinations using the same server and port causes problems #31478 The retry_sql_inserts option does not work when using reliable disk-buffer #31567 TLS-encrypted RLTP connections from multiple clients can crash the server #31609 Using a source in a flow-controlled logpath applies flow-controlled to every logpath that includes the source #31628 Messages generated before, but received after the daylight-saving change can have incorrect day information #31304 Incorrect loglevel for internal messages generated when the audit logs are cleared #31337 Improve the syslog-ng Agent error messages for EventID 167 #31425 Improve the syslog-ng Agent error messages for EventID 163 #31538 TLS-encrypted communication fails in the Windows Agent ("CAPI_RSA_SIGN:unsupported algorithm nid") #31565 syslog-ng Agent leaks memory on Windows Vista or newer platforms For details on the fixed issues see our issue tracking page at https://www.balabit.com/mybalabit/fixed-bugs/revision/syslog-ng-pe/5.0.5 DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 LTS (5.0.5) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng Premium Edition 5 F1 (5.1.1) has been released
by devel＠balabit.hu 10 Jun '14

10 Jun '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 F1 (5.1.1) SUMMARY : New syslog-ng Premium Edition feature release DATE : May 28, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 5 F1 (5.1.1) has been released. For latest fixes in the 5 F1 (5.1.x) branch you are recommended to upgrade to this version. CHANGES: 5 F1 (5.1.1) Wed, 28 May 2014 14:08:00 Dear syslog-ng Premium Edition Users, A new feature version of the syslog-ng Premium Edition (PE) has been released. To read about the new features of syslog-ng Premium Edition 5 F1 (5.1.1), see the What's New guide at: http://www.balabit.com/support/documentation/ New feature highlights: * Send logs to MongoDB database servers * Parse JSON-formatted messages * Format messages following the JSON standard * Installers for several new platforms The documentation of syslog-ng 5.1, including the installation and user guides is available in PDF, HTML, and single-page HTML format at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… UPGRADE: For details on upgrading and possible upgrade paths, read upgrading syslog-ng in the The syslog-ng Premium Edition 5.1 Administrator Guide. Kind Regards, BalaBit IT Security For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed-bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 F1 (5.1.1) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng 3.4.8 has been released
by devel＠balabit.hu 06 Jun '14

06 Jun '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.8 SUMMARY : new stable release DATE : Jun 6, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.4.8) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version. CHANGES: 3.4.8 Fri, 6 Jun 2014 12:05:59 +0200 This is the seventh bug-fix release for the 3.4.x series, with a set of important fixes over 3.4.7 released last December. Upgrading to this release is highly recommended. Features ======== * Support for tzif3 format timezone files (used by recent releases of the tzdata package) was implemented. * SDATA enterprise IDs are now handled correctly when using value-pairs, they will not be needlessly split up into smaller chunks. Bugfixes ======== * Drivers using value-pairs() (mongodb, format-json, etc) were made more robust, and will not behave strangely anymore when using higher compiler optimisation levels. * The DATE macro in most value-pairs() scopes will now always contain the stamp time, as opposed to sometimes the received or the stamp time. * The syslog-proto (rfc5424) scope of value-pairs() now includes SDATA too. * The $SEQNUM macro is now correctly handled by the $(format-json) template function. * Drivers using value-pairs() will now work correctly when a macro is specified in a key() statement. * When using the same json-parser() in multiple log paths, syslog-ng no longer crashes when no marker was set. * When a GeoIP lookup fails, handle it gracefully, avoiding an annoying glib warning. * When running in a FreeBSD jail, the system() source will not use /dev/klog. * Various memory leaks were plugged (related to internal locking, and value-pairs). * When building from Git, the grammar files are now build-able with bison 3+. Builds from tarballs are unaffected. Miscellaneous changes ===================== * The host() and port() options of the MongoDB destination driver have been labelled as deprecated. They already were, just not marked so. * The username() and password() options of the AMQP driver were made mandatory. Credits ======= syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Andras Mitzki <micek(a)balabit.hu> Balazs Scheidler <bazsi(a)balabit.hu> Daniel Gados <gdani(a)balabit.hu> Fabien Wernli Gergely Nagy <algernon(a)balabit.hu> Igor Ippolitov <iippolitov(a)gmail.com> Laszlo Meszaros <lmesz(a)balabit.hu> Nick Alcock <nix(a)esperi.org.uk> Peter Czanik <czanik(a)balabit.hu> Tibor Benke <btibi(a)balabit.hu> Viktor Tusa <tusa(a)balabit.hu> Xufeng Zhang <xufeng.zhang(a)windriver.com> DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0