[SECURITY] Fedora 8 Update: syslog-ng-2.0.7-1.fc8

updates at fedoraproject.org updates at fedoraproject.org
Fri Jan 18 23:56:16 UTC 2008


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2008-0523
2008-01-16 19:00:55
--------------------------------------------------------------------------------

Name        : syslog-ng
Product     : Fedora 8
Version     : 2.0.7
Release     : 1.fc8
URL         : http://www.balabit.com/products/syslog-ng/
Summary     : Syslog replacement daemon
Description :
syslog-ng, as the name shows, is a syslogd replacement, but with new
functionality for the new generation. The original syslogd allows
messages only to be sorted based on priority/facility pairs; syslog-ng
adds the possibility to filter based on message contents using regular
expressions. The new configuration scheme is intuitive and powerful.
Forwarding logs over TCP and remembering all forwarding hops makes it
ideal for firewalled environments.

--------------------------------------------------------------------------------
Update Information:

Contains a security fix for CVE-2007-6437/ZSA-2007-029 DoS
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jan  8 2008 Douglas E. Warner <silfreed at silfreed.net> 2.0.7-1
- updated to 2.0.7
- force regeneration to avoid broken paths from upstream (#265221)
- adding loggen binary
* Mon Dec 17 2007 Douglas E. Warner <silfreed at silfreed.net> 2.0.6-1
- updated to 2.0.6
- fixes DoS in ZSA-2007-029
* Thu Nov 29 2007 Peter Vrabec <pvrabec at redhat.com> 2.0.5-3
- add conflicts (#400661)
* Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 2.0.5-2
- Rebuild for selinux ppc32 issue.
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #400661 - The syslog-ng an rsyslog packages should conflict
        https://bugzilla.redhat.com/show_bug.cgi?id=400661
  [ 2 ] Bug #426173 - CVE-2007-6437 syslog-ng crash by message with invalid timestamp separator
        https://bugzilla.redhat.com/show_bug.cgi?id=426173
  [ 3 ] Bug #265221 - syslog-ng fails to build due to debuginfo issue
        https://bugzilla.redhat.com/show_bug.cgi?id=265221
  [ 4 ] Bug #426306 - CVE-2007-6437 syslog-ng crash by message with invalid timestamp separator [8]
        https://bugzilla.redhat.com/show_bug.cgi?id=426306
--------------------------------------------------------------------------------
Updated packages:

d11cef478db981444452fc12a5bf824920986ea9 syslog-ng-debuginfo-2.0.7-1.fc8.ppc64.rpm
874e35fc69b75b5a48498ee318f763c9f231ff90 syslog-ng-2.0.7-1.fc8.ppc64.rpm
dc6cca15842b764530c82430871a925505b724ff syslog-ng-debuginfo-2.0.7-1.fc8.i386.rpm
6d2ea6aa71a3bc185db29560b6ab19777db5b5e6 syslog-ng-2.0.7-1.fc8.i386.rpm
a081a07b231a503624c0e584722f8c55b792e2c4 syslog-ng-debuginfo-2.0.7-1.fc8.x86_64.rpm
b0f5e78066b53ff65ae4227cb9448fdc761189e9 syslog-ng-2.0.7-1.fc8.x86_64.rpm
4613cde6ce6e6ad4c59591887112cecc773917f4 syslog-ng-debuginfo-2.0.7-1.fc8.ppc.rpm
c5ebf5a7a904019360f87d6e4a2d2c9fb31ed3c2 syslog-ng-2.0.7-1.fc8.ppc.rpm
79113ee1f18d799a0db3888c595895e7c9d0ce1c syslog-ng-2.0.7-1.fc8.src.rpm

This update can be installed with the "yum" update program.  Use 
su -c 'yum update syslog-ng' 
at the command line.  For more information, refer to "Managing Software
with yum", available at http://docs.fedoraproject.org/yum/.
--------------------------------------------------------------------------------




More information about the package-announce mailing list