[syslog-ng] syslog-ng 3.7.0beta2

[Tech Support]

Any idea when the final release for 3.7.0 will be released?

Thanks;

John

 

From: syslog-ng-bounces at lists.balabit.hu [mailto:syslog-ng-bounces at lists.balabit.hu] On Behalf Of Czanik, Péter
Sent: Friday, June 26, 2015 12:35 PM
To: Syslog-ng users' and developers' mailing list
Subject: Re: [syslog-ng] syslog-ng 3.7.0beta2

 

Hi,
Upgrade nodes for packagres from beta1 -> beta2 (this is a changelog for my SUSE packages):
- add back man pages
- re-enable smp build
- follow geoip modul name change (tfgeoip -> geoip-plugin)

Bye,




Peter Czanik (CzP) <peter.czanik at balabit.com>
BalaBit IT Security / syslog-ng upstream
http://czanik.blogs.balabit.com/
https://twitter.com/PCzanik

 

On Fri, Jun 26, 2015 at 3:28 PM, Budai, László <laszlo.budai at balabit.com> wrote:


3.7.0beta2


This is the second beta release of the upcoming syslog-ng OSE 3.7
branch.

Changes compared to the previous alpha release:


Features


·  Added a geoip parser.

·  ssl_options inside tls() extended with the following set:
no-sslv2, no-sslv3, no-tlsv1, no-tlsv11, no-tlsv12

·  minimal libriemann-client version bumped from 1.0.0 to 1.6.0

·  TLS support added to Riemann destination

·  timeout() option added to Riemann destination


Fixes


·  SyslogNg.jar removed from the release tarball.

·  When the configured host was not available during the initialization of
afsocket destination syslog-ng just didn't start. From now, syslog-ng
starts in that case and will retry connecting to the host periodically.

·  When a not writeable file becomes writeable later, syslog-ng recognize it
(with the help of reopen-timer) and delivers messages to the file without
dropping those which were received during the file was not available.

·  Fixed a configure error around libsystemd-journal.

·  --disable-python option and other Python related fixes addded to 
configure

·  Retries fixed in SQL destination. In some circumstances when
retry_sql_inserts was set to 1, after an insertion failure all incoming
messages were dropped.

·  Added DOS/Windows line ending support in config.

·  Parallel build is supported for Python and Java destination drivers.

·  Fixed compilation failure on OpenBSD

·  Memory leak around reload and internal queueing mechanism has been fixed.

·  AMQP connection process fixed.

·  Fixed a potential abort when the localhost name cannot be detected.

·  Security issue fixed around $HOST.
Tech details:
When the name of the host is too long, the buffer we use to format the
chained hostname is truncated. However snprintf() returns the length the
result would be if no truncation happened, thus we will read uninitialized
bytes off the stack when we use that pointer to set $HOST
with log_msg_set_value().

There can be some security implications, like reading values from the stack
that can help to craft further exploits, especially in the presense of
address space randomization. It can also cause a DoS if the hostname length
is soo large that we would read over the top-of-the-stack, which is probably
not mmapped causing a SIGSEGV.

·  Journal entries containing name-value pairs without '=' caused syslog-ng
to crash. Instead of crashing, syslog-ng just drop these nv pairs.


Credits


syslog-ng is developed as a community project, and as such it relies
on volunteers, to do the work necessarily to produce syslog-ng.

Reporting bugs, testing changes, writing code or simply providing
feedback are all important contributions, so please if you are a user
of syslog-ng, contribute.

We would like to thank the following people for their contribution:

Alex Badics, Andras Mitzki, Balazs Scheidler, Bence Tamas Gedai,
Fabien Wernli, Gergely Nagy, Gergo Nagy, Gyorgy Pasztor, Istvan Adam Mozes,
Laszlo Budai, Peter Czanik, Robert Fekete, Tibor Benke, Viktor Juhasz,
Zoltan Pallagi.

—
View it on GitHub <https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.0beta2> .


______________________________________________________________________________
Member info: https://lists.balabit.hu/mailman/listinfo/syslog-ng
Documentation: http://www.balabit.com/support/documentation/?product=syslog-ng
FAQ: http://www.balabit.com/wiki/syslog-ng-faq



 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.balabit.hu/pipermail/syslog-ng/attachments/20150626/cdd5ea1c/attachment.htm