------------------------------------------------------------------------------ PACKAGE : syslog-ng Premium Edition VERSION : 5 LTS (5.0.4a) SUMMARY : new stable release DATE : Apr 11, 2014 ------------------------------------------------------------------------------ DESCRIPTION: A new stable version of syslog-ng Premium Edition (5 LTS (5.0.4a)) has been released. For latest fixes in the 5.0.x branch you are recommended to upgrade to this version. CHANGES: 5 LTS (5.0.4a) Wed, 9 April 2014 15:31:20 +0100 Security updates: CVE-2014-0160: The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug. The syslog-ng Premium Edition 5 LTS was packaged with a vulnerable OpenSSL version. OpenSSL has been patched and updated in this release and syslog-ng PE is no longer vulnerable to this attack. Earlier versions of syslog-ng PE are not affected. For details on the fixed issues see our issue tracking page at https://www.balabit.com/mybalabit/fixed-bugs/revision/ DOWNLOAD: Download the latest binaries from: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/supp... Note that to download the binaries, you have to login into your MyBalaBit account. The documentation of the syslog-ng application is available in The syslog-ng Premium Edition 5 LTS (5.0.4a) Administrator Guide at: http://www.balabit.com/network-security/syslog-ng/central-syslog-server/supp... Kind Regards, BalaBit IT Security You are receiving this email because you showed interest in our products. Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a6376942acc171/70ad6e5f080b1071> from the syslog-ng Premium Edition Technical Newsletter.