-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 23 Oct 2025 12:31:38 +0200 Source: syslog-ng Binary: syslog-ng syslog-ng-mod-extra syslog-ng-scl Architecture: all Version: 3.38.1-5+deb12u1 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Jochen Sprickerhof Description: syslog-ng - Enhanced system logging daemon (metapackage) syslog-ng-mod-extra - transitional package syslog-ng-scl - Enhanced system logging daemon (scl files) Changes: syslog-ng (3.38.1-5+deb12u1) bookworm; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Add fix for CVE-2024-47619: `tls_wildcard_match()` matches on certificates such as `foo.*.bar` although that is not allowed. It is also possible to pass partial wildcards such as `foo.a*c.bar` which glib matches but should be avoided / invalidated. This issue could have an impact on TLS connections, such as in man-in-the-middle situations. Checksums-Sha1: 6d3fa1beebcab0eb5dacb2c9bba03039b68bbb60 8692 syslog-ng-mod-extra_3.38.1-5+deb12u1_all.deb 7cc48e1d023abf58fcf6db0dd0886bf4b965aeed 34068 syslog-ng-scl_3.38.1-5+deb12u1_all.deb e3e4025d4a6874012db33337cb8f305ec04cf0ce 11536 syslog-ng_3.38.1-5+deb12u1_all-buildd.buildinfo e8a5b4cce853c43d0f92d4eae9fd411633ebda94 9240 syslog-ng_3.38.1-5+deb12u1_all.deb Checksums-Sha256: 41dfefda84d293215655e25e8b8db754b86edea3d583ec4b85dd56fcc2932ecf 8692 syslog-ng-mod-extra_3.38.1-5+deb12u1_all.deb d94f7ed046cbefac711a070259f6b508e7d677317f8af847418ab8a9bb9cdade 34068 syslog-ng-scl_3.38.1-5+deb12u1_all.deb 0d09059051523a885e09fdfcf5018e19fe9fd56584450e273c284b0a1bb34160 11536 syslog-ng_3.38.1-5+deb12u1_all-buildd.buildinfo b7a91b4f5e54372411fbddab78f23f6385d4d6533029bf8bf4cd2bc29ca45020 9240 syslog-ng_3.38.1-5+deb12u1_all.deb Files: 994d2e58b31afec299a1e1ba0ffcaa99 8692 oldlibs optional syslog-ng-mod-extra_3.38.1-5+deb12u1_all.deb b997a05aed87fa8e60441c1b15be8e15 34068 admin optional syslog-ng-scl_3.38.1-5+deb12u1_all.deb 4c5bb675562eb36aac7e9e56c1984b8e 11536 admin optional syslog-ng_3.38.1-5+deb12u1_all-buildd.buildinfo bf5852b6e8a9f3a1db8c7a80da95c183 9240 admin optional syslog-ng_3.38.1-5+deb12u1_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmk0G3YACgkQJm69HxMT N+o0mg/9HZyo1wwFBc92weUt2TfykZBnsRG/qpudUbyf107iwd05vscjYT6sojGT enk7lYw6InWStaQyTYDRRBR9Kbq/RRWNqeek3js6b/yS/FuH/GQ/MnrIm5qAch0o 2z10mBtEucmrxWlwLPFF1iWrznyVng+JP/kSqIpVS3dEhpboCQxk94Iy+jNTFoGH vPSRk858xDlakW99Od7P9pbug02A4BDJdmZsgCNr/sK3No0xed4abQR74l6hGgbX GSO0k5sxntGl/F0sQtM2DY9gt7iZhba4E18mLzHMktqEbpKPQC/i6q7PkuDMpz/f viVjy6F8x0kw3JXJ+8IY0NS8TSUdcCd8FxhL8b3Q8KonVbRowcUqN/yWvGSyvbSw rOCtc3Rots5s3Upi/FZJ2wFdYy45mvyJD8xiZAu8/Ltdj6+h8gbbwTfqmhFRhwGN LDx8ye85Wmxy4SShSC3otd+RQhcozVcXQnm+7QaRdtWUn8cbSsOOocKGKZpxJc7/ YMqh7qw9JxShQNpwz1UWLkSmZ7s27vLboN5YXJq1+xX5QDa4DSZwRpm8/4hxz3+1 pZSyb3uHkggiDQ4LZq0erIjdwZFwYMWItGXkvncU7UyGIQxQ3TbiyVKV+mxF65hZ T0vajDqrlms4JiOruiJ4WvIR9cQSivJ65fYD60YVaxqbH0yNPQM= =6vUl -----END PGP SIGNATURE-----