- Committer: Bazaar Package Importer
- Date: 2008-01-15 17:49:57 UTC
- Revision ID: james.westby@ubuntu.com-20080115174957-06n2y4pf0iabkvc2
* SECURITY UPDATE: Allows remote attackers to cause a denial of service
(crash) via a message with a timestamp that does not contain a trailing
space, which triggers a NULL pointer dereference.
* src/logmsg.c (log_msg_parse): fixed possible NULL pointer dereference
in log message parsing, as done in upstream RCS
* References:
- http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commitdiff;h=3126ebad217e7fd6356f4733ca33f571aa87a170
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6437
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457334
* Closes lp: #183389
(crash) via a message with a timestamp that does not contain a trailing
space, which triggers a NULL pointer dereference.
* src/logmsg.c (log_msg_parse): fixed possible NULL pointer dereference
in log message parsing, as done in upstream RCS
* References:
- http://git.balabit.hu/?p=bazsi/syslog-ng-2.0.git;a=commitdiff;h=3126ebad217e7fd6356f4733ca33f571aa87a170
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6437
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=457334
* Closes lp: #183389
| Filename | Latest Rev | Last Changed | Committer | Comment | Size | ||
|---|---|---|---|---|---|---|---|
 .. |
|||||||
contrib
|
1 | 22 years ago | Bazaar Package Importer | Import upstream version 1.5.15 |
|
||
|
debian
|
6 | 18 years ago | Bazaar Package Importer | * New upstream version. * Changed accepted Console |
|
||
|
doc
|
1 | 22 years ago | Bazaar Package Importer | Import upstream version 1.5.15 |
|
||
|
src
|
1 | 22 years ago | Bazaar Package Importer | Import upstream version 1.5.15 |
|
||
|
tests
|
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 |
|
||
aclocal.m4 |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 40.2 KB |
|
|
|
AUTHORS |
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 | 62 bytes |
|
|
|
ChangeLog |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 37.8 KB |
|
|
|
config.h.in |
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 | 3.4 KB |
|
|
configure |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 208 KB |
|
|
|
configure.in |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 7.1 KB |
|
|
|
COPYING |
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 | 14.7 KB |
|
|
|
depcomp |
5 | 18 years ago | Bazaar Package Importer | * New upstream version. * Debian patch cleaned up. | 13.5 KB |
|
|
|
dist.conf.in |
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 | 144 bytes |
|
|
|
install-sh |
5 | 18 years ago | Bazaar Package Importer | * New upstream version. * Debian patch cleaned up. | 6.9 KB |
|
|
|
Makefile.am |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 560 bytes |
|
|
|
Makefile.in |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 17 KB |
|
|
|
missing |
5 | 18 years ago | Bazaar Package Importer | * New upstream version. * Debian patch cleaned up. | 10 KB |
|
|
|
mkinstalldirs |
1.1.3 | 18 years ago | Bazaar Package Importer | Import upstream version 1.6.8 | 1.9 KB |
|
|
|
NEWS |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 10.1 KB |
|
|
|
README |
7 | 17 years ago | Bazaar Package Importer | * New upstream version - Fixed log facility and | 163 bytes |
|
|
|
VERSION |
1.1.5 | 17 years ago | Bazaar Package Importer | Import upstream version 1.9.11 | 7 bytes |
|
|