Accepting request 253950 from Base:System

rsyslog Version 8.4.2 [v8-stable] 2014-10-02 [bnc#899756]

Rationale for accepting to 13.2: 
Last accepted SR#253447 from opensuse132-syncer to rsyslog 8.4.1 contained an incomplete fix. 8.4.2 is a corrective release without new features or unrelated incompatible changes.

OBS-URL: https://build.opensuse.org/request/show/253950
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/rsyslog?expand=0&rev=98

rsyslog-8.4.1.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:1c7f3e8ebb7f9865dd4100c4982d50567dded2218177086d1e02d698e352d8ac
-size 1938151

rsyslog-8.4.2.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:71c3c6dac74fba2692f9fefb092cd3d22e2bd71eb702e0da06648de51b8b7b9a
+size 1938563

rsyslog.changes

@@ -1,3 +1,15 @@
+-------------------------------------------------------------------
+Sat Oct  4 20:08:12 UTC 2014 - andreas.stieger@gmx.de
+
+- rsyslog Version 8.4.2 [v8-stable] 2014-10-02 [bnc#899756]
+  This release primarily contains a correction for the previous fix
+  for the PRI vulnerability which was incomplete.
+  - bugfix: the fix for CVE-2014-3634 did not handle all cases
+    This is corrected now. see also: CVE-2014-3683
+  - fixed a build problem on some platforms
+  - behaviour change: "msg" of messages with invalid PRI set to
+    "rawmsg"
+
 -------------------------------------------------------------------
 Wed Oct  1 08:44:57 UTC 2014 - mt@suse.de
 

rsyslog.spec

@@ -20,7 +20,7 @@ Name:           rsyslog
 Summary:        The enhanced syslogd for Linux and Unix
 License:        (GPL-3.0+ and Apache-2.0)
 Group:          System/Daemons
-Version:        8.4.1
+Version:        8.4.2
 Release:        0
 %if 0%{?suse_version} >= 1210
 %bcond_without  systemd