-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 May 2025 12:12:49 +0100 Source: syslog-ng Architecture: source Version: 4.8.1-5 Distribution: unstable Urgency: medium Maintainer: syslog-ng maintainers <syslog-ng-maintainers@alioth-lists.debian.net> Changed-By: SZALAY Attila <sasa@debian.org> Closes: 1104890 Changes: syslog-ng (4.8.1-5) unstable; urgency=medium . * Fix transport accepting incorrect wildcards This patch cherry-picked from upstream until they fix it in an official release. It can also be used as a baseline to fix the same issue in older releases. CVE-ID: CVE-2024-47619 (Closes: #1104890) Checksums-Sha1: 8c5268e1838f89b372f0f8ff2675047212cd8f24 4292 syslog-ng_4.8.1-5.dsc 7896f50caa3b37de2826a6a268076b3641103519 47088 syslog-ng_4.8.1-5.debian.tar.xz 745768ed488a85ba18430297f3ec9486787db0e6 11482 syslog-ng_4.8.1-5_source.buildinfo Checksums-Sha256: e32b3bb5454993d5eb3e13ac96936a25e205d2fd43774fa3b57e862ca5f23212 4292 syslog-ng_4.8.1-5.dsc 8a06ac84f864e9de7b6d989d8280c1db04cd9f1f397f4f248b9428f68d42e099 47088 syslog-ng_4.8.1-5.debian.tar.xz 426006e5452bbb8c8b9146243b7d72435d39a5d276a117258c9eaeb8651ac795 11482 syslog-ng_4.8.1-5_source.buildinfo Files: 198fe75a1a9acc3adf499ebc94c350c0 4292 admin optional syslog-ng_4.8.1-5.dsc bd7816bf4253a89cb490b420e59f54ac 47088 admin optional syslog-ng_4.8.1-5.debian.tar.xz 449aadfce8620da62fed63dc80de8aa9 11482 admin optional syslog-ng_4.8.1-5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQJEBAEBCgAuFiEEDLxdlTMbVcF2xVjk+A0hGpn97vgFAmggoCcQHHNhc2FAZGVi aWFuLm9yZwAKCRD4DSEamf3u+PEXD/9HAuc43y7BUirZdRgkm/nQLRF0KcjT/Ip+ QFNJb2zxN8Oup+TRoLNk+1FOaSk5yf9kgUv/a0zjjWNKCp+HnPhkgpg3IdfWJCjI 9qwVU2csrgTcd4NZ5GmPP3CD4fnWxihJD2jvs33zVnnUolENuHKYYOKNGS+lEZOt 1WxG+dk06eXO96G0UlStKW1kN9sFQciCyAshpVqWNzPRAxVYJtknNCOxnY3T4oE0 soU6rni7+8zNQy1gA+doDviBjywWgmBGgoejs9SOy9r3CF4qG4nifB4SKGwbDONV pRbnwK119XFk1BCyJV5UOqDIZLGUELm0ZOi2fKdmnsVNdHvlB9XOcrvgAL3qXD2I zcZpr7crl8MBgYe1c4u/NNY1Uay4E0LPcbUUF03rjNjLGddJ6q0DkcBGa3kidRTu n3phX1m+5fjr7W8bwFWnjkOKaeeeJj8TKsKP7TGe6VG8QN/C4R4/A3LEj6ZdKE2J b+2iGroZyWf0vHmToqoQ2Wi7hakCcds5VW+59DECZaTLPRPF91hlCPTst1KUnlK8 O+3dCssMIP4wvamRUeu/+cLYGvSUs2cBL0cZosS6pvgLuKk/wRLhcpFsPg62VVBK 1EQu3F4N6+GtkVcRydYkB1P9yJQbvd5Xkc/HK/LyIPVgQjFlNynxLd1XH2gWKNzJ aA+YcBk3rQ== =7Jhl -----END PGP SIGNATURE-----