[arch-dev-public] [signoff] logrotate 3.8.0-1

Eric Bélanger snowmaniscool at gmail.com
Thu Jul 7 23:56:24 EDT 2011


Hi,

logrotate 3.8.0-1 is in testing. Changes:
- Upstream update
- Added check function

Please test and signoff.

Eric

3.7.9 -> 3.8.0
 	        - added "dateyesterday" option (see man page)
 	        - fixed crash when config file had exactly 4096*N bytes
 	        - added WITH_ACL make option to link against -lacl and preserve ACLs
 	          during rotation
 	        - added "su" option to define user/group for rotation. Logrotate now
 	          skips directories which are world writable or writable by group
 	          which is not "root" unless "su" directive is used.
 	        - fixed CVE-2011-1098: race condition by creation of new files
 	        - fixed possible shell injection when using "shred"
directive (CVE-2011-1154)
 	        - fixed escaping of file names within 'write state' action
(CVE-2011-1155)
 	        - better 'size' directive description
 	        - fixed possible buffer-overflow when reading config files
 	        - NetBSD/FreeBSD compilation fixes
 	        - Solaris compilation fixes


More information about the arch-dev-public mailing list