Critical Notification

syslog-ng Premium Edition

syslog-ng Premium Edition may be affected when malformed log files are received as outlined in CVE-2022-38725 vulnerability.

How does this affect me?

Malformed log files sent to syslog-ng Premium Edition may impact the performance and or availability of the product.

The affected versions are all syslog-ng Premium Edition 7 versions. 

Workaround 

There is currently no workaround. 

Resolution

A new version of syslog-ng Premium Edition is available which resolves this issue. Customers should upgrade as soon as possible to this newly released version.

Status

Version (7.0.32) of syslog-ng Premium Edition containing a resolution to the above is now available for download. Please visit the syslog-ng Premium Edition support portal and navigate to the downloads section. 

We apologize for any inconvenience this issue may have caused.