Please sync syslog-ng 2.0.9-4.1 (universe) from Debian unstable (main).

The path to the DTD in the debian package is wrong. Marking as invalid for sync as a result, we'll sync it when it's really fixed in debian

We probably want to sync with 2.0.9-4.1 which fixes the DTD path, together with two other issues:

syslog-ng (2.0.9-4.1) unstable; urgency=high

  * Non-maintainer upload; high priority due to the following security fix.
  * Add chdir() before chroot(), and exit if either fails. (Closes: #505791)
  * Fix typo in postrm. (Closes: #505797)
  * Fix path to DocBook XML DTD. (Closes: #477223)

Please sync syslog-ng 2.0.9-4.1 (universe) from Debian unstable (main).

All of the Ubuntu delta was merged in Debian so it can be dropped:
* doc/reference/syslog-ng.xml: Fix reference to docbookx.dtd
* debian/control: Build-Depend on docbook-xml
* doc/reference/README.syslog-ng-anon: Add missing last sample and link to sample config file
* debian/syslog-ng.init: Fix syslog-ng new path
In particular 2.0.9-4.1 fixes the DTD path that was incorrectly merged in 2.0.9-4.

Changelog since current jaunty version 2.0.9-3ubuntu1:

syslog-ng (2.0.9-4.1) unstable; urgency=high

  * Non-maintainer upload; high priority due to the following security fix.
  * Add chdir() before chroot(), and exit if either fails. (Closes: #505791)
  * Fix typo in postrm. (Closes: #505797)
  * Fix path to DocBook XML DTD. (Closes: #477223)

 -- Ben Hutchings <email address hidden> Sun, 23 Nov 2008 20:26:06 +0000

syslog-ng (2.0.9-4) unstable; urgency=low

  * Fixed init script to check /usr/sbin/syslog-ng instead of /sbin/syslog-ng. (Closes: #492363)
  * Added /dev/xconsole creation into restart and reload too. (Closes: #492585)
  * Added missing last paragraph to the README. (Closes: #477224)
  * Fixed documentation build problem. (Closes: #477223)

 -- SZALAY Attila <email address hidden> Sun, 27 Jul 2008 23:19:03 +0200

ACK from me.

Thanks,

James

[Updating] syslog-ng (2.0.9-3ubuntu1 [Ubuntu] < 2.0.9-4.1 [Debian])
 * Trying to add syslog-ng...
  - <syslog-ng_2.0.9-4.1.diff.gz: downloading from http://ftp.debian.org/debian/>
  - <syslog-ng_2.0.9-4.1.dsc: downloading from http://ftp.debian.org/debian/>
  - <syslog-ng_2.0.9.orig.tar.gz: already in distro - downloading from librarian>
I: syslog-ng [universe] -> syslog-ng_2.0.9-3ubuntu1 [universe].

The "Add chdir() before chroot(), and exit if either fails" fix in Debian 2.0.9-4.1 is CVE-2008-5110