[syslog-ng-announce] syslog-ng Premium Edition 5 LTS (5.0.4a) has been released

devel at balabit.hu devel at balabit.hu
Fri Apr 11 13:31:02 CEST 2014

PACKAGE             : syslog-ng Premium Edition
VERSION             : 5 LTS (5.0.4a)
SUMMARY             : new stable release
DATE                : Apr 11, 2014


  A new stable version of syslog-ng Premium Edition (5 LTS (5.0.4a)) has been
  released. For latest fixes in the 5.0.x branch you are recommended to
  upgrade to this version.


5 LTS (5.0.4a)
    Wed, 9 April 2014 15:31:20 +0100

    Security updates:

        CVE-2014-0160: The (1) TLS and (2) DTLS implementations in OpenSSL
                       1.0.1 before 1.0.1g do not properly handle Heartbeat
                       Extension packets, which allows remote attackers to obtain
                       sensitive information from process memory via crafted
                       packets that trigger a buffer over-read, as demonstrated
                       by reading private keys, related to d1_both.c and t1_lib.c,
                       aka the Heartbleed bug.

                       The syslog-ng Premium Edition 5 LTS was packaged with a
                       vulnerable OpenSSL version. OpenSSL has been patched and
                       updated in this release and syslog-ng PE is no longer vulnerable
                       to this attack. Earlier versions of syslog-ng PE are not affected.

  For details on the fixed issues see our issue tracking page at


  Download the latest binaries from:

  Note that to download the binaries, you have to login into your MyBalaBit

  The documentation of the syslog-ng application is available in
  The syslog-ng Premium Edition 5 LTS (5.0.4a) Administrator Guide at:

  Kind Regards,

  BalaBit IT Security

You are receiving this email because you showed interest in our  products.
Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a6376942acc171/70ad6e5f080b1071>
from the syslog-ng Premium Edition Technical Newsletter.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 199 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng-announce/attachments/20140411/1dfdb0b8/attachment.pgp 

More information about the syslog-ng-announce mailing list