FreeBSD Ports: syslog-ng2

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: syslog-ng2

The remote host is missing an update to the system as announced in the referenced advisory. VID 75f2382e-b586-11dd-95f9-00e0815b8da8 OpenVAS Vulnerability Test $ Description: Auto generated from VID 75f2382e-b586-11dd-95f9-00e0815b8da8 Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD : syslog-ng2 -- startup directory leakage in the chroot environment (75f2382e-b586-11dd-95f9-00e0815b8da8)

Florian Grandel reports : I have not had the time to analyze all of syslog-ng code. But by reading the code section near the chroot call and looking at strace results I believe that syslog-ng does not chdir to the chroot jail's location before chrooting into it. This opens up ways to work around...