[syslog-ng-announce] syslog-ng Premium Edition 5 LTS (5.0.4a) has been released

[devel at balabit.hu]

------------------------------------------------------------------------------
PACKAGE             : syslog-ng Premium Edition
VERSION             : 5 LTS (5.0.4a)
SUMMARY             : new stable release
DATE                : Apr 11, 2014
------------------------------------------------------------------------------

DESCRIPTION:

  A new stable version of syslog-ng Premium Edition (5 LTS (5.0.4a)) has been
  released. For latest fixes in the 5.0.x branch you are recommended to
  upgrade to this version.

CHANGES:

5 LTS (5.0.4a)
    Wed, 9 April 2014 15:31:20 +0100

    Security updates:

        CVE-2014-0160: The (1) TLS and (2) DTLS implementations in OpenSSL
                       1.0.1 before 1.0.1g do not properly handle Heartbeat
                       Extension packets, which allows remote attackers to obtain
                       sensitive information from process memory via crafted
                       packets that trigger a buffer over-read, as demonstrated
                       by reading private keys, related to d1_both.c and t1_lib.c,
                       aka the Heartbleed bug.

                       The syslog-ng Premium Edition 5 LTS was packaged with a
                       vulnerable OpenSSL version. OpenSSL has been patched and
                       updated in this release and syslog-ng PE is no longer vulnerable
                       to this attack. Earlier versions of syslog-ng PE are not affected.

  For details on the fixed issues see our issue tracking page at
  https://www.balabit.com/mybalabit/fixed-bugs/revision/

DOWNLOAD:

  Download the latest binaries from:

  http://www.balabit.com/network-security/syslog-ng/central-syslog-server/support/upgrade
  Note that to download the binaries, you have to login into your MyBalaBit
  account.

  The documentation of the syslog-ng application is available in
  The syslog-ng Premium Edition 5 LTS (5.0.4a) Administrator Guide at:
  http://www.balabit.com/network-security/syslog-ng/central-syslog-server/support/documentation/

  Kind Regards,

  BalaBit IT Security





You are receiving this email because you showed interest in our  products.
Unsubscribe <http://www.balabit.com/newsletter/unsubscribe/4398019b4f2681fdce75b07177a6376942acc171/70ad6e5f080b1071>
from the syslog-ng Premium Edition Technical Newsletter.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 199 bytes
Desc: not available
Url : http://lists.balabit.hu/pipermail/syslog-ng-announce/attachments/20140411/1dfdb0b8/attachment.pgp