Ubuntu
logrotate package

logrotate 3.19.0-1ubuntu1.1 source package in Ubuntu

Changelog

logrotate (3.19.0-1ubuntu1.1) jammy-security; urgency=medium

  * SECURITY UPDATE: DoS via insecure permissions on state file
    - debian/patches/ubuntu/CVE-2022-1348-1.patch: skip locking if state
      file is world-readable in logrotate.c, logrotate.spec.in,
      test/Makefile.am, test/test-0087.sh, test/test-0092.sh,
      test/test-config.92.in.
    - debian/patches/ubuntu/CVE-2022-1348-2.patch: drop permissions on
      state file when ACLs are enabled in logrotate.c, test/test-0048.sh.
    - CVE-2022-1348

 -- Marc Deslauriers <email address hidden>  Wed, 25 May 2022 10:10:26 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main admin
Jammy security main admin

Downloads

File Size SHA-256 Checksum
logrotate_3.19.0.orig.tar.xz 162.4 KiB ddd5274d684c5c99ca724e8069329f343ebe376e07493d537d9effdc501214ba
logrotate_3.19.0.orig.tar.xz.asc 833 bytes 43f148e6296cdf6a6d46e7f1ae98f88faab8a5350cf531d60d8ee10b72b07225
logrotate_3.19.0-1ubuntu1.1.debian.tar.xz 23.1 KiB dde754aa3763b71ebee0c22f13743e49f7aaaacd33cc731c94b10be60d62e269
logrotate_3.19.0-1ubuntu1.1.dsc 2.3 KiB 60e46687deb5d7ec4bbb7e15b8b37d0d5a4111db70de76409bd9652d62f22cf9

View changes file

Binary packages built by this source

logrotate: Log rotation utility

 The logrotate utility is designed to simplify the administration of
 log files on a system which generates a lot of log files. Logrotate
 allows for the automatic rotation compression, removal and mailing of
 log files. Logrotate can be set to handle a log file daily, weekly,
 monthly or when the log file gets to a certain size. Normally, logrotate
 runs as a daily cron job.

logrotate-dbgsym: debug symbols for logrotate