Security update for rsyslog (important)

rsyslog has been updated to fix a remote denial of service issue:

   * Under certain configurations, a local or remote attacker able to
     send syslog messages to the server could have crashed the log server
     due to an array overread. (CVE-2014-3634, CVE-2014-3683)

Security Issues:

   * CVE-2014-3634
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3634">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3634</a>&gt;
   * CVE-2014-3683
     &lt;<a href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3683">http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3683</a>&gt;