- syslog-ng-announce - lists.balabit.hu

syslog-ng 3.4.0beta1 has been released
by devel＠balabit.hu 20 Dec '12

20 Dec '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.0beta1 SUMMARY : new stable release DATE : Dec 15, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Open Source Edition (3.4.0beta1) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version. CHANGES: 3.4.0beta1 Sat, 15 Dec 2012 02:21:14 +0100 Features: ========= * Added support for the amqp() destination driver, which sends messages to an AMQP queue. * Added support for a new parser named syslog-parser() that can invoke the RFC3164 and RFC5424 parser outside the source driver that received the message. Delaying the syslog parsing can be advantageous in case some preprocessing or filtering needs to take place before the actual syslog parsing. * Added support for dot notation in the $(format-json) template function. * Changed the MongoDB driver to use inserts instead of upserts. * Added support for UNIX domain sockets in the MongoDB driver by using the new path() option. * Added new template functions to perform various cryptographic hash functions on data, like: $(md5), $(md4), $(sha1), $(sha256), $(sha512) * Added a couple of new parsers to db-parser() pattern format: * @PCRE@: use this to parse using a regexp * @EMAIL@: to parse email addresses * @HOSTNAME@: to parse host names * @LLADDR@: to parse link-level addresses, like ethernet MAC addresses * Added the possibility to set TCP keepalive options for TCP based transports: tcp-keepalive-time(), tcp-keepalive-probes(), tcp-keepalive-intvl(). Also added the tcp-keepalive() option as an alias to the earlier so-keepalive() parameter. TCP keepalive became enabled by default. Bugfixes: ========= * Updated with the bugfixes from v3.3.7 * Fixed SQL statement formatting used to create indexes on Oracle. The original query contained an apostrophe when specifying the column name. * Fixed an incorrect validation in the file() source, which caused the entire file to be resent in case syslog-ng was restarted and an encoding() is specified. * Increased the performance when following files with the encoding() option set. Previously, the code to check if the source encoding is fixed size was incorrect, which in turn caused syslog-ng to excercise its slow path when processing these files, instead of a faster alternative. * Fixed a memory leak issue when encoding() is used for file sources and syslog-ng was reloaded. * Fixed a bug in processing the encoding() option for udp() sources. syslog-ng incorrectly propagated the character decoding state from one frame to the next, which might have originated from different senders. * Infinite feedback loops of internal messages triggering another set of internal messages are now detected and suppressed. Earlier it was not safe to enable debug/trace messages during runtime, now it is. * Fixed a race condition in resolving IP address to hostnames, which might have caused garbage in the hostname part of messages. This is most likely mitigated by the DNS cache. Other changes: ============== * Added unit test coverage for various log transport implementations. * Reorganized the LogProto code to support plugins, the transport() option for the syslog() and network() drivers can be used to specify a transport protocol plugin. Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Attila Nagy <bra(a)fsn.hu> Balazs Scheidler <bazsi(a)balabit.hu> Balint Kovacs <blint(a)balabit.hu> Brian Kroth <bpkroth(a)gmail.com> Conrad Hoffmann <ch(a)bitfehler.net> Csaba Major <csaba.major(a)balabit.com> Cy Schubert <cy(a)FreeBSD.org> Eun Kyung <ekyung01(a)googlemail.com> Evan Rempel <erempel(a)uvic.ca> Gergely Nagy <algernon(a)balabit.hu> Jose Oliveira <jpo(a)di.uminho.pt> Juhasz Viktor <jviktor(a)balabit.hu> Marvin Nipper <marvin.nipper(a)stream.com> Michael Hocke <michael.hocke(a)nyu.edu> Peter Czanik <czanik(a)balabit.hu> Peter Gyongyosi <gyp(a)balabit.hu> Sandor Geller <wildy(a)muhelybt.hu> Sergey <cloun-rulez(a)yandex.ru> shih dane <daneshih1125(a)gmail.com> Tamas Pal <folti(a)balabit.hu> Viktor Juhasz <jviktor(a)balabit.hu> DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng 3.3.7 has been released
by devel＠balabit.hu 31 Oct '12

31 Oct '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.3.7 SUMMARY : new stable release DATE : Oct 30, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.3.7) has been released. For latest fixes in the 3.3.x feature branch you are recommended to upgrade to this version. CHANGES: 3.3.7 Wed, 31 Oct 2012 10:00:00 +0200 Highlights ========== This release is a bug-fix release, correcting a handful of issues discovered after the previous version was tagged. Bugfixes ======== * The bundled ivykis has been updated, fixing the following issues: * Fixed a Solaris-specific issue relating to TCP sources [#190] * Fixed a spinlock issue, triggered on at least FreeBSD [#193] * Workaround an issue with kqueue() on /dev/klog [#201] * The file source was corrected to properly handle character devices. This, and the ivykis update fixes a CPU spinning issue on FreeBSD. [#201] * The sun-streams module had a file descriptor leak, which has been corrected too. [#151] * The glob-based configuration file inclusion was fixed to behave similarly to including a whole directory, to include files alphabetically. [#191] The @include mechanism was also updated to not fail silently, but report an error in certain cases (such as permission errors, or missing files in case of an explicit, non-glob include). [#209] * Fixed a crash when trying to display the available modules in debug mode. [#189] * Fixed the building of afsocket-notls, so that it is correctly built without TLS support. [#188] * Fix compilation without spoof-source. [#192] * Avoid a feedback loop when emitting debug (and trace) messages. [#208] * Various minor fixes around the build system. Features ======== * The stats will now list the filename of unix domain sockets. [#195] Credits ======= syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Anton Koldaev <koldaevav(a)gmail.com> Attila Nagy <bra(a)fsn.hu> Balazs Scheidler <bazsi(a)balabit.hu> Cy Schubert <cy(a)FreeBSD.org> Dave Reisner <dreisner(a)archlinux.org> Evan Rempel <erempel(a)uvic.ca> Gergely Nagy <algernon(a)balabit.hu> Jose Pedro Oliveira <jpo(a)di.uminho.pt> Lennert Buytenhek <buytenh(a)wantstofly.org> Marvin Nipper <marvin.nipper(a)stream.com> Michael Hocke <michael.hocke(a)nyu.edu> Peter Czanik <czanik(a)balabit.hu> Tamas Pal <folti(a)balabit.hu> Yorick Peterse DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng Premium Edition 4 LTS (4.0.5a) has been released
by devel＠balabit.hu 29 Aug '12

29 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 LTS (4.0.5a) SUMMARY : new stable release DATE : Aug 28, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (4 LTS (4.0.5a)) has been released. For a full description on stable and feature releases, see Section 2.16. Stable and feature releases of syslog-ng PE in The syslog-ng Premium Edition 4 LTS (4.0.5a) Administrator Guide. CHANGES: 4 LTS (4.0.5a) Tue, 28 Aug 2012 10:19:32 +0200 Security updates: CVE-2012-2110, CVE-2012-2131, CVE-2006-7250 The documentation of syslog-ng 4 LTS, including the installation and user guides is available in PDF, HTML, and single-page HTML format at: http://www.balabit.com/support/documentation/ UPGRADE: For details on upgrading and possible upgrade paths, read Section 3.5., Upgrading syslog-ng in the The syslog-ng Premium Edition 4 LTS Administrator Guide: http://www.balabit.com/support/documentation/syslog-ng-pe-v4.0-guide-admin-… Kind Regards, BalaBit IT Security For details on the fixed issues see our issue tracking page at http://www.balabit.com/mybalabit/fixed_bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/upg… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 LTS (4.0.5a) Administrator Guide at: http://www.balabit.com/support/documentation/ Kind Regards, BalaBit IT Security

1 0

syslog-ng Premium Edition 4 F2 (4.2.3a), has been released
by devel＠balabit.hu 29 Aug '12

29 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.3a), SUMMARY : New syslog-ng Premium Edition feature release DATE : Aug 28, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 4 F2 (4.2.3a), has been released. For latest fixes in the 4 F2 (4.2.x) branch you are recommended to upgrade to this version. CHANGES: 4 F2 (4.2.3a) Tue, 28 Aug 2012 10:19:32 +0200 Security updates: CVE-2012-2110, CVE-2012-2131, CVE-2006-7250 Kind Regards, BalaBit IT Security DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 F2 (4.2.3a), Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security

1 0

syslog-ng 3.3.6 has been released
by devel＠balabit.hu 27 Aug '12

27 Aug '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.3.6 SUMMARY : new stable release DATE : Aug 27, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.3.6) has been released. For latest fixes in the 3.3.x feature branch you are recommended to upgrade to this version. CHANGES: 3.3.6 Fri, 10 Aug 2012 11:00:00 +0200 Highlights ========== This release is a bug-fix release mostly, with a few minor - yet useful - feature enhancements. The most important one is that the patched ivykis syslog-ng 3.3 shipped with until now is no more. We build against upstream ivykis now (still included for convenience, though). Other highlights include much improved systemd support, and an enhancement to the @include feature, and many bugfixes. See below for more information! Features ======== * The system() source automatically detects systemd, and defines the proper log socket accordingly. If the system() source is not used, a workaround to use the systemd supplied log socket instead of /dev/log was applied. This kicks in if syslog-ng is running under systemd, and its config version is 3.4 or less. * The @include statement now accepts globs, allowing one to limit what gets included, and limit it to files matching "*.conf", for example. Bugfixes ======== * When using spoof-source, the destination address is now correctly resolved again after a SIGHUP. * When the supervisor receives a SIGHUP, it will not terminate anymore, but ignore it. * The fsync(yes) functionality was restored, and will now do what it is supposed to do. * A memory corruption was fixed in the DNS cache when used in threaded mode and dns-cache-hosts() is used. * The program() destination now correctly closes the standard input of the running program when syslog-ng is being reloaded (as opposed to only sending a signal). * Incorrect encoding of data caused UDP and unix-dgram() receives to be erroneously closed, so no further data would be received. This has been fixed. Incorrect encoding of incoming data causes the connection for connection oriented transports (like tcp() and unix-stream()) to be closed, but the same condition is ignored for datagram oriented transports (like udp() or unix-dgram()). * Fixed a possible NULL dereference in patterndb, when an action was used without a context-scope. * The max-connections() setting now works correctly accross reloads, and does not reset the counter. Other changes ============= * On systems that have utmpx(5), syslog-ng will prefer and use that over the older utmp(5). This means that there is no more patching needed for systems like FreeBSD 9, which only support utmpx. Credits ======= syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Alex Zimnitsky <avz(a)dagotel.ru> Alexander Komyagin <komyagin(a)altell.ru> Balazs Scheidler <bazsi(a)balabit.hu> Cary Taylor <ctaylor(a)ptgi.com> EgonB <egon(a)local.ee> Evan Rempel <erempel(a)uvic.ca> Gergely Nagy <algernon(a)balabit.hu> Imre Lazar <imre(a)balabit.hu> Jose Pedro Oliveira <jpo(a)di.uminho.pt> Lennert Buytenhek <buytenh(a)wantstofly.org> Mads <mads(a)ab3.no> Mark Ulmer <mark.ulmer(a)apollogrp.edu> Mark Wooding <mdw(a)distorted.org.uk> Marvin Nipper <marvin.nipper(a)stream.com> Patrick Hemmer Peter Czanik <czanik(a)balabit.hu> Sandor Geller <wildy(a)muhelybt.hu> Viktor Juhasz <jviktor(a)balabit.hu> DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng Premium Edition 4 F2 (4.2.3), has been released
by devel＠balabit.hu 06 Jul '12

06 Jul '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.3), SUMMARY : New syslog-ng Premium Edition feature release DATE : Jul 6, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 4 F2 (4.2.3), has been released. For latest fixes in the 4 F2 (4.2.x) branch you are recommended to upgrade to this version. CHANGES: 4 F2 (4.2.3), Fri, 06 Jul 2012 14:08:00 +0200 New feature: * Starting with version 4 F2 (4.2.3), the syslog-ng Premium Edition SQL destination and source drivers support the Oracle database on AIX platforms as well. Fixed issues: #26272: syslog-ng counts host limit in relay mode #15978: Support Oracle database driver on AIX platforms #26322: Kernel source missing from the default configuration on HP-UX Kind Regards, BalaBit IT Security For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed_bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 F2 (4.2.3), Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security

1 0

syslog-ng 3.4.0alpha3 has been released
by devel＠balabit.hu 30 Jun '12

30 Jun '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.0alpha3 SUMMARY : new stable release DATE : Jun 30, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Open Source Edition (3.4.0alpha3) has been released. For latest fixes in the 3.4.x branch you are recommended to upgrade to this version. CHANGES: 3.4.0alpha3 Fri, 29 Jun 2012 15:32:54 +0200 Features: ========= * Added set-tag() and clear-tag() rewrite rules. * Added a marker() option to the json-parser(), which indicates that a message is indeed has a json payload. Used to implement a cee-style payload parser. http://bazsi.blogs.balabit.com/2012/05/cee-prototype-and-a-show-case-for-th… * The system source automatically detectd systemd and defines the proper log socket accordingly. Also, if the system() source is not used, a workaround to use the systemd supplied log socket instead of /dev/log was applied. This kicks in if syslog-ng is running under systemd and its config version is 3.3 or less. * Support for FreeBSD's utmpx database. Featured ported from the Premium Edition ======================================== * Added 12 hour time related macros $AMPM and $HOUR12 * Added $USEC and $MSEC macros for micro and milliseconds respectively. * Added $SYSUPTIME that expands to the time since syslog-ng started in the number of 1/100th of a second (just like in the SNMP sysUptime value). * db-parser(): added field extraction to the matching or program names * Added support for Cisco extended timestamp format, one that includes time synchronity information and sequence numbers. https://github.com/bazsi/syslog-ng-3.4/commit/046f90e76137f31e61412d24b9920… * Added support for mark-mode() that allows the customization how MARK messages are generated. https://github.com/bazsi/syslog-ng-3.4/commit/c38d7ad9a2d40650e243ec29c6b3e… Bugfixes: ========= * Fixed a possible segmentation fault in threaded mode when dns-cache-hosts() is used. * Incorrect encoding of data caused UDP and unix-dgram() receives to be erroneously closed, so no further data would be received. This has been fixed. Incorrect encoding of incoming data causes the connection for connection oriented transports (like tcp() and unix-stream()) to be closed, but the same condition is ignored for datagram oriented transports (like udp() or unix-dgram()). * Accept empty source and destination object in the configuration file. * Fixed a linking issue when using the SMTP destination. * Ignore SIGHUP in the supervisor process. * Fixed fsync() behaviour for destination files. * Fixed a possible NULL deref in db-parser() correllation when context-scope is not defined. Other changes: ============== * Added a --disable-smtp configure option. * Integrated unit test refactorization changes from the BalaBit syslog-ng and SSB teams. * Added systemd alias "syslog" to the unit file. Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Alexander Komyagin <komyagin(a)altell.ru> EgonB <egon(a)local.ee> Evan Rempel <erempel(a)uvic.ca> Imre Lazar <imre(a)balabit.hu> Jose Pedro Oliveira <jpo(a)di.uminho.pt> Mark Ulmer <mark.ulmer(a)apollogrp.edu> Patrick Hemmer Peter Czanik <czanik(a)balabit.hu> Attila Magyar <athos(a)balabit.hu> Attila Nagy <naat(a)balabit.hu> Balazs Scheidler <bazsi(a)balabit.hu> Gergely Nagy <algernon(a)balabit.hu> Juhasz Viktor <jviktor(a)balabit.hu> Peter Gyorko <gyorkop(a)balabit.hu> Viktor Juhasz <jviktor(a)balabit.hu> DOWNLOAD: You can download the source packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng 3.4.0alpha2 has been released
by devel＠balabit.hu 01 May '12

01 May '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.4.0alpha2 SUMMARY : new stable release DATE : May 1, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.4.0alpha2) has been released. For latest fixes in the 3.4.x feature branch you are recommended to upgrade to this version. CHANGES: 3.4.0alpha2 Tue, 01 May 2012 08:59:21 +0200 Features: ========= * Added support for globbing when including files. Now you can use UNIX shell style wildcards in the names of include files and syslog-ng will properly source all matching files. * Allow huge messages. Earlier log messages were limited to 256k in size, with each name-value pair limited at 64k. These limitations were lifted, syslog-ng now uses a 32 bit integer field to hold the size information for both the whole data structure and individual fields. An artificial limit of 256MB is still applied though, but it is trivial to change that in the future, and until then this should suffice. Other changes: ============== * Flow-control logic was changed, instead of enabling flow-control for all branches of a log statement when a single flags(flow-control) was present, only enable it downwards. * Changed json-parser() to encode JSON array members as ${array[0]}, ${array[1]} and so on, instead of using ".index" suffixes. * Fixed Makefile.am files to avoid attempting to compile mongodb and smtp destination drivers when they are disabled. * Fixed --with-json configure option parsing and added --disable-json for consistency with other optional features. * Removed the "dummy" module, which only served as a placeholder when the original "pluginization" happened in 3.2. Bugfixes: ========= * Fixed a segmentation fault, which happened when source or destination objects were defined without any actual drivers. * Fixed a possible crash in config file parsing that happens when parsing a unix-dgram() source driver and file permissions (owner, group, perm) specified. * Fixed a possible crash (double-free) in the value-pairs command line parser used in $(format-json), in case the command line options have syntax errors. * Handle and print template compilation errors properly during configuration parsing. * Fixed some memory leaks in the configuration compilation code introduced in 3.4. Bugfixes backported from 3.3 (matching 3.3.5): ============================================== * Fixed a significant memory leak that occurred when the receiver side of a syslog connection is slower than syslog-ng. The message which we got EAGAIN for got leaked. * Fixed another memory leak that caused the complete queue for socket based destination drivers to be leaked at reload time. * Fixed a memory leak related to handling TLS enabled connections. As connections come and go the TLS context wasn't freed. * Fixed a small memory leak that occurred when worker threads exit (and later start again). * Fixed a deadlock in the SQL destination that occurred when a COMMIT TRANSACTION command failed. * Fixed an abort() which occurred when the retry timer of a suspended destination fired. * Fixed a framing error in RFC5424 destinations. * MongoDB & SQL: fixed a race condition that caused mongodb/sql destinations to hang. * Fixed handling the ENOBUFS error in udp() destinations on FreeBSD and related/derived platforms. Previously ENOBUFS caused syslog-ng to suspend the destination for time_reopen() (which defaults to 60 seconds), but that's excessive. Reading the literature suggests that there are three ways to handle an ENOBUFS: wait for some undetermined amount of time until the interface buffers are presumably emptied, or let the packet be dropped or go back to the poll loop and hope that by the next time the event is dispatched ENOBUFS will be gone. Right now, syslog-ng will drop the affected packet, as the other two could cause other tasks to starve (wait some time) OR syslog-ng to use 100% CPU. Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Peter Czanik (BalaBit) Martin Grauel (BalaBit) Patrick Hemmer Hendrik Völker (Verizon) Gergely Nagy (BalaBit) Evan Rempel (University of Victoria) Balint Kovacs (BalaBit) Heiko Gerstung Andreas Piesk Matthias Runge (Fedora) DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng 3.3.5 has been released
by devel＠balabit.hu 01 May '12

01 May '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng VERSION : 3.3.5 SUMMARY : new stable release DATE : May 1, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Open Source Edition (3.3.5) has been released. For latest fixes in the 3.3.x feature branch you are recommended to upgrade to this version. CHANGES: 3.3.5 Sat, 07 Apr 2012 10:35:25 +0200 Bugfixes: ========= * Fixed a significant memory leak that occurred when the receiver side of a syslog connection is slower than syslog-ng. The message which we got EAGAIN for got leaked. * Fixed another memory leak that caused the complete queue for socket based destination drivers to be leaked at reload time. * Fixed a memory leak related to handling TLS enabled connections. As connections come and go the TLS context wasn't freed. * Fixed a small memory leak that occurred when worker threads exit (and later start again). * Fixed a deadlock in the SQL destination that occurred when a COMMIT TRANSACTION command failed. * Fixed an abort() which occurred when the retry timer of a suspended destination fired. * Fixed a framing error in RFC5424 destinations. * MongoDB & SQL: fixed a race condition that caused mongodb/sql destinations to hang. * Fixed handling the ENOBUFS error in udp() destinations on FreeBSD and related/derived platforms. Previously ENOBUFS caused syslog-ng to suspend the destination for time_reopen() (which defaults to 60 seconds), but that's excessive. Reading the literature suggests that there are three ways to handle an ENOBUFS: wait for some undetermined amount of time until the interface buffers are presumably emptied, or let the packet be dropped or go back to the poll loop and hope that by the next time the event is dispatched ENOBUFS will be gone. Right now, syslog-ng will drop the affected packet, as the other two could cause other tasks to starve (wait some time) OR syslog-ng to use 100% CPU. Other changes: ============== * The XML sources for manual pages are now included in the source tarball, along with a set of already built man pages to avoid having to install XML related toolings to compile syslog-ng. The path to the stylesheets and the path to xsltproc is hard-coded in the Makefiles right now (to the paths used by Ubuntu 11.10) In case you want to change and rebuild manpages these need to be adjusted. Patches to autodetect the proper paths on any system would be welcome. * Rewrite expressions report an error during the configuration parsing phase instead of silently (ok with a warning :) falling back to changing the MESSAGE macro. Credits: ======== syslog-ng is developed as a community project, and as such it relies on volunteers to do the work necessarily to produce syslog-ng. Reporting bugs, testing changes, writing code or simply providing feedback are all important contributions, so please if you are a user of syslog-ng, contribute. These people have helped in this release: Balazs Scheidler (BalaBit) Eric Lindvall (SevenScale) Evan Rempel (University of Victoria) Fried Zoltan (BalaBit) Gergely Nagy (BalaBit) Jakub Jankowski (SuperHost.pl) Juhasz Viktor (BalaBit) Marvin Nipper (Stream Global Services) Patrick Hemmer Robert Fekete (BalaBit) Traiano Welcome whille Yuri Arabadji (Fused) DOWNLOAD: You can download the source or binary packages from: http://www.balabit.com/network-security/syslog-ng/opensource-logging-system… The documentation of the syslog-ng Open Source Edition is available in The syslog-ng Open Source Edition Administrator's Guide at http://www.balabit.com/support/documentation/

1 0

syslog-ng Premium Edition 4 F2 (4.2.2a) has been released
by devel＠balabit.hu 18 Apr '12

18 Apr '12

------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 4 F2 (4.2.2a) SUMMARY : New syslog-ng Premium Edition feature release DATE : Apr 18, 2012 ------------------------------------------------------------------------------ DESCRIPTION: A new version of syslog-ng Premium Edition 4 F2 (4 F2 (4.2.2a)) has been released. For latest fixes in the 4 F2 (4.2.x) branch you are recommended to upgrade to this version. CHANGES: 4 F2 (4.2.2a) Tue, 17 Apr 2012 14:08:00 +0200 CHANGES: Changes between syslog-ng Premium Edition 4.2.2 and 4.2.2a: New platform * In addition to the already supported platforms, syslog-ng Premium Edition now supports the following operating system and architecture: - HP-UX 11v3 on Itanium64 No other changes were applied to the syslog-ng code base. Kind Regards, BalaBit IT Security For details on the fixed issues see our new issue tracking page at https://www.balabit.com/mybalabit/fixed_bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 4 F2 (4.2.2a) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/sup… Kind Regards, BalaBit IT Security

1 0