September 2014 - syslog-ng-announce

BalaBit products are not exposed to CVE-2014-6271
by devel＠balabit.hu 26 Sep '14

26 Sep '14

------------------------------------------------------------------------------ SUMMARY : BalaBit products are not exposed to CVE-2014-6271 PACKAGE : Shell Control Box, syslog-ng Store Box, syslog-ng PE VERSION : All versions DATE : Sep 26, 2014 ------------------------------------------------------------------------------ DESCRIPTION: As published a few days ago, a bug discovered in the widely used Bash command interpreter poses a critical security risk to Unix and Linux systems. The BalaBit Security Team has analyzed the source code of all supported versions of every BalaBit products, and concluded that although our products contain the impacted version of Bash, none of our products are exploitable by the vulnerability described in CVE-2014-6271 aka. 'Shell Shock' or 'Bash vulnerability'. We will incorporate the required Bash patches in the next regular security updates. The following product versions were analyzed: syslog-ng PE 4.0: There is no attack vector in this product. 5.0: There is no attack vector in this product. 5.1: There is no attack vector in this product. SSB 3.0: The code review showed no vulnerable code. 3.1: The code review showed no vulnerable code. 3.2: The code review showed no vulnerable code. SCB 3.0: The code review showed no vulnerable code. 3.5: The code review showed no vulnerable code. 4.0: The code review showed no vulnerable code. For further information regarding the vulnerability, please consult: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-6271 Best Regards, BalaBit You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng 3.6.0rc1 has been released
by devel＠balabit.hu 26 Sep '14

26 Sep '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.6.0rc1 SUMMARY : new release candidate DATE : Sep 26, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new release candidate of syslog-ng Open Source Edition (3.6.0rc1) has been released. CHANGES: 3.6.0rc1 ======== Fri, 26 Sep 2014 11:17:31 +0200 This is the first Release Candidate of the syslog-ng OSE 3.6 branch. Based on our test results this release is almost production ready. Features -------- * Added groupset rewrite object. Groupset allows the user to modify multiple log message properties at once. It also allows referencing the old value of the property as the $_ macro. Bugfixes -------- * Fixed a memory leak during configuration parsing when using `rewrite()`. * Change control socket message from notice to debug * Fixes for retries() functionality. Retry counter incremented by every message write error (including network connection errors) which can lead to message lost. Credits ------- syslog-ng is developed as a community project, and as such it relies on volunteers, to do the work necessary to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. We would like to thank the following people for their contribution: Balazs Scheidler, Brian De Wolf, Gergely Nagy, Laszlo Budai, Peter Czanik, Tibor Benke, Viktor Juhasz, Viktor Tusa. DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.6.0r… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng Premium Edition 5 LTS (5.0.6b) has been released
by devel＠balabit.hu 17 Sep '14

17 Sep '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 LTS (5.0.6b) SUMMARY : new stable release DATE : Sep 17, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (5 LTS (5.0.6b)) has been released. For latest fixes in the 5.0.x branch you are recommended to upgrade to this version. CHANGES: 5 LTS (5.0.6b) Wed, 17 September 2014 10:00:20 +0100 Fixed Bugs: Correction of bug #32324 was missing from 5.0.6a. This release solves the problem and provides a fix for bug #32324. #32324 Memory consumption of syslog-ng is high when using reliable disk-buffer and the destination becomes inaccessible For details on the fixed issues see our issue tracking page at https://www.balabit.com/mybalabit/fixed-bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 LTS (5.0.6b) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng 3.6.0beta2 has been released
by devel＠balabit.hu 11 Sep '14

11 Sep '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.6.0beta2 SUMMARY : new beta release DATE : Sep 11, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new beta version of syslog-ng Open Source Edition (3.6.0beta2) has been released. Being the - hopefully - last beta release, we would be very grateful for any feedback, to stabilize the release further. CHANGES: 3.6.0beta2 ========== Thu, 11 Sep 2014 13:09:57 +0200 This is the second beta release of the upcoming syslog-ng OSE 3.6 branch. Compared to the previous beta, this release contains a few minor features and bugfixes. We expect the next release to be a release candidate, focusing on stability and bugfixes. Testing is most appreciated! Features -------- * It is now possible to load not only a single certificate when using TLS, but a certificate chain. * The `system()` source will not include `/dev/kmsg` (or `/proc/kmsg`) when running inside a Linux container. Bugfixes -------- * The `in-list()` filter was fixed to look at all elements of the list, instead of only the last one. * Fixed an assertion when using the `match()` filter under certain circumstances. * The `system()` source will not add `/dev/kmsg` (or `/proc/kmsg` on older kernels) to the default sources if using the systemd journal, because kernel logs are included in the journal. Credits ------- syslog-ng is developed as a community project, and as such it relies on volunteers, to do the work necessary to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. We would like to thank the following people for their contribution: Andras Mitzki, Balazs Scheidler, Gergely Nagy, Gyorgy Pasztor, Peter Czanik, Tibor Benke. DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.6.0b… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng Premium Edition 5 LTS (5.0.6a) has been released
by devel＠balabit.hu 10 Sep '14

10 Sep '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 LTS (5.0.6a) SUMMARY : new stable release DATE : Sep 10, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (5 LTS (5.0.6a)) has been released. For latest fixes in the 5.0.x branch you are recommended to upgrade to this version. CHANGES: 5 LTS (5.0.6a) Wed, 10 September 2014 13:10:20 +0100 Fixed Bugs: #31733 When using wildcard file sources to monitor lots (1000+) of files, syslog-ng detects new files very slowly #31734 syslog-ng does not indicate if it uses inotify or poll #32324 Memory consumption of syslog-ng is high when using reliable disk-buffer and the destination becomes inaccessible #32409 syslog-ng does not create a table for new month in MSSQL #32428 SQL error messages are not displayed #32453 SQL source cannot read newer resources like BIGINT from MSSQL Security updates: CVE-2014-3505, CVE-2014-3506, CVE-2014-3507, CVE-2014-3508, CVE-2014-3509, CVE-2014-3510, CVE-2014-3511, CVE-2014-3512, CVE-2014-5139 For details on the fixed issues see the following OpenSSL Security Advisory: https://www.openssl.org/news/secadv_20140806.txt For details on the fixed issues see our issue tracking page at https://www.balabit.com/mybalabit/fixed-bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 LTS (5.0.6a) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a63…> from the syslog-ng Premium Edition Technical Newsletter.

1 0

syslog-ng 3.6.0beta1 has been released
by devel＠balabit.hu 05 Sep '14

05 Sep '14

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.6.0beta1 SUMMARY : new beta release DATE : Sep 5, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.6.0beta1) has been released. Being the first beta release, we would be very grateful for any feedback, to stabilize the release further. CHANGES: 3.6.0beta1 Wed, 3 Sep 2014 14:40:14 +0200 This is the first beta release of the upcoming syslog-ng OSE 3.6 branch. Compared to the alphas, this release contains a moderate amount of new functionality and bugfixes. Further releases will focus on stability and bugfixes. Features -------- * One can now use multiple elements in the `key()` and `exclude()` options of any value-pairs declaration. * A new source driver was added to the syslog-ng: `systemd-journal()`, which reads from the Journal directly, not via the syslog forwarding socket. The `system()` source defaults to using this source when systemd is detected. Bugfixes -------- * All the various crypto-related template functions now check that the desired length of the digest is not larger than the digest itself. If a larger value is requested, they will truncate it to the digest length. * The `$(geoip)` template function now works with `threaded(yes)` too. * The unix domain socket credentials code was changed to only build on Linux and FreeBSD. With this change, syslog-ng should compile again on platforms where the OS does not support this, with the feature disabled. Credits ------- syslog-ng is developed as a community project, and as such it relies on volunteers, to do the work necessary to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. We would like to thank the following people for their contribution: Andras Mitzki, Fabien Wernli, Gergely Nagy, Laszlo Budai, Michael Hocke, Tibor Benke, Viktor Juhasz, Viktor Tusa. DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/downloads/files/syslog-ng/open-source-edition/3.6.0b… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0