Changelog for 6.1.12 (v6-beta)

Version 6.1.12  [BETA], 2011-09-01

  • bugfix/security: off-by-two bug in legacy syslog parser, CVE-2011-3200
  • bugfix: mark message processing did not work correctly
  • bugfix: potential misadressing in property replacer
  • bugfix: memcpy overflow can occur in allowed sender checkig if a name is resolved to IPv4-mapped-on-IPv6 address
    Found by Ismail Dönmez at suse
  • bugfix: The NUL-Byte for the syslogtag was not copied in MsgDup (msg.c)
  • bugfix: fixed incorrect state handling for Discard Action (transactions)
    Note: This caused all messages in a batch to be set to COMMITTED even if they were discarded.

Changelog for 5.9.3 (v5-devel)

Version 5.9.3  [V5-DEVEL], 2011-09-01

  • bugfix/security: off-by-two bug in legacy syslog parser, CVE-2011-3200
  • bugfix: mark message processing did not work correctly
  • added capability to emit config error location info for warnings otherwise, omusrmsg’s warning about new config format was not accompanied by problem location.
  • bugfix: potential misadressing in property replacer
  • bugfix: MSGID corruption in RFC5424 parser under some circumstances
    closes: http://bugzilla.adiscon.com/show_bug.cgi?id=275
  • bugfix: The NUL-Byte for the syslogtag was not copied in MsgDup (msg.c)

Changelog for 5.8.5 (v5-stable)

Version 5.8.5  [V5-stable] (rgerhards/al), 2011-09-01

  • bugfix: security: off-by-two bug in legacy syslog parser, CVE-2011-3200
  • bugfix: mark message processing did not work correctly
  • bugfix: potential hang condition during tag emulation
  • bugfix: too-early string termination during tag emulation
  • bugfix: The NUL-Byte for the syslogtag was not copied in MsgDup (msg.c)
  • bugfix: fixed incorrect state handling for Discard Action (transactions)
    Note: This caused all messages in a batch to be set to COMMITTED, even if they were discarded.

Changelog for 4.6.8 (v4-stable)

Version 4.6.8  [v4-stable] (rgerhards), 2011-09-01

  • bugfix/security: off-by-two bug in legacy syslog parser, CVE-2011-3200
  • bugfix: potential misadressing in property replacer
  • bugfix: memcpy overflow can occur in allowed sender checking if a name is resolved to IPv4-mapped-on-IPv6 address
    Found by Ismail Dönmez at suse
  • bugfix: The NUL-Byte for the syslogtag was not copied in MsgDup (msg.c)
Scroll to top