Overview

Request 81985 accepted

- update to 3.8.1
- dropped CVE patches as they were merged to upstream
- changelog
- fixed 1 memory leak in prerotateSingleLog
- do not redirect logrotate errors to /dev/null in cron script
- fixed "size" directive parsing
- handle situation when acl_get_fd is supported, but acl_set_fd is not
- added "maxsize" directive (see man page)
- added "dateyesterday" option (see man page)
- fixed crash when config file had exactly 4096*N bytes
- added WITH_ACL make option to link against -lacl and preserve ACLs
during rotation
- added "su" option to define user/group for rotation. Logrotate now
skips directories which are world writable or writable by group
which is not "root" unless "su" directive is used.
- fixed CVE-2011-1098: race condition by creation of new files
- fixed possible shell injection when using "shred" directive (CVE-2011-1154)
- fixed escaping of file names within 'write state' action (CVE-2011-1155)
- better 'size' directive description
- fixed possible buffer-overflow when reading config files (forwarded request 81574 from vitezslav_cizek)

Loading...
Request History
Michal Vyskocil's avatar

mvyskocil created request

- update to 3.8.1
- dropped CVE patches as they were merged to upstream
- changelog
- fixed 1 memory leak in prerotateSingleLog
- do not redirect logrotate errors to /dev/null in cron script
- fixed "size" directive parsing
- handle situation when acl_get_fd is supported, but acl_set_fd is not
- added "maxsize" directive (see man page)
- added "dateyesterday" option (see man page)
- fixed crash when config file had exactly 4096*N bytes
- added WITH_ACL make option to link against -lacl and preserve ACLs
during rotation
- added "su" option to define user/group for rotation. Logrotate now
skips directories which are world writable or writable by group
which is not "root" unless "su" directive is used.
- fixed CVE-2011-1098: race condition by creation of new files
- fixed possible shell injection when using "shred" directive (CVE-2011-1154)
- fixed escaping of file names within 'write state' action (CVE-2011-1155)
- better 'size' directive description
- fixed possible buffer-overflow when reading config files (forwarded request 81574 from vitezslav_cizek)


Stephan Kulow's avatar

coolo added a reviewer

Please review sources


Sascha Peilicke's avatar

saschpe approved review

ok


Sascha Peilicke's avatar

saschpe accepted request

Accepted submit request 81985 from user saschpe


Saul Goodman's avatar

licensedigger accepted review

{"approve": "preliminary, version number changed"}


Stephan Kulow's avatar

coolo accepted review

Builds for repo openSUSE_Factory

Output of check script (non-fatal):
- package has logrotate-rpmlintrc: (unchanged)


Sascha Peilicke's avatar

saschpe accepted review

ok

openSUSE Build Service is sponsored by