<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
 <HEAD>
   <TITLE> [Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2
   </TITLE>
   <LINK REL="Index" HREF="index.html" >
   <LINK REL="made" HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5BRPM%5D%20cauldron%20core/release%20logrotate-3.8.0-1.mga2&In-Reply-To=%3C20110706092956.GN21938%40mars-attacks.org%3E">
   <META NAME="robots" CONTENT="index,nofollow">
   <META http-equiv="Content-Type" content="text/html; charset=us-ascii">
   <LINK REL="Previous"  HREF="006378.html">
   <LINK REL="Next"  HREF="006381.html">
 </HEAD>
 <BODY BGCOLOR="#ffffff">
   <H1>[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2</H1>
    <B>nicolas vigier</B> 
    <A HREF="mailto:mageia-dev%40mageia.org?Subject=Re%3A%20%5BMageia-dev%5D%20%5BRPM%5D%20cauldron%20core/release%20logrotate-3.8.0-1.mga2&In-Reply-To=%3C20110706092956.GN21938%40mars-attacks.org%3E"
       TITLE="[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2">boklm at mars-attacks.org
       </A><BR>
    <I>Wed Jul  6 11:29:56 CEST 2011</I>
    <P><UL>
        <LI>Previous message: <A HREF="006378.html">[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2
</A></li>
        <LI>Next message: <A HREF="006381.html">[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#6379">[ date ]</a>
              <a href="thread.html#6379">[ thread ]</a>
              <a href="subject.html#6379">[ subject ]</a>
              <a href="author.html#6379">[ author ]</a>
         </LI>
       </UL>
    <HR>  
<!--beginarticle-->
<PRE>On Wed, 06 Jul 2011, Ahmad Samir wrote:

&gt;<i> On 4 July 2011 08:25, Mageia Team &lt;<A HREF="https://www.mageia.org/mailman/listinfo/mageia-dev">buildsystem-daemon at mageia.org</A>&gt; wrote:
</I>&gt;<i> &gt; Name &#160; &#160; &#160; &#160;: logrotate &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160;Relocations: (not relocatable)
</I>&gt;<i> &gt; Version &#160; &#160; : 3.8.0 &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; Vendor: Mageia.Org
</I>&gt;<i> &gt; Release &#160; &#160; : 1.mga2 &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160;Build Date: Mon Jul &#160;4 08:24:04 2011
</I>&gt;<i> &gt; Install Date: (not installed) &#160; &#160; &#160; &#160; &#160; &#160; &#160; Build Host: ecosse
</I>&gt;<i> &gt; Group &#160; &#160; &#160; : File tools &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160;Source RPM: (none)
</I>&gt;<i> &gt; Size &#160; &#160; &#160; &#160;: 55428 &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160; &#160;License: GPLv2
</I>&gt;<i> &gt; Signature &#160; : (none)
</I>&gt;<i> &gt; Packager &#160; &#160;: Mageia Team &lt;<A HREF="http://www.mageia.org">http://www.mageia.org</A>&gt;
</I>&gt;<i> &gt; URL &#160; &#160; &#160; &#160; : <A HREF="https://fedorahosted.org/logrotate/">https://fedorahosted.org/logrotate/</A>
</I>&gt;<i> &gt; Summary &#160; &#160; : Rotates, compresses, removes and mails system log files
</I>&gt;<i> &gt; Description :
</I>&gt;<i> &gt; The logrotate utility is designed to simplify the administration of
</I>&gt;<i> &gt; log files on a system which generates a lot of log files. &#160;Logrotate
</I>&gt;<i> &gt; allows for the automatic rotation compression, removal and mailing of
</I>&gt;<i> &gt; log files. &#160;Logrotate can be set to handle a log file daily, weekly,
</I>&gt;<i> &gt; monthly or when the log file gets to a certain size. &#160;Normally,
</I>&gt;<i> &gt; logrotate runs as a daily cron job.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; Install the logrotate package if you need a utility to deal with the
</I>&gt;<i> &gt; log files on your system.
</I>&gt;<i> &gt;
</I>&gt;<i> &gt; ahmad &lt;ahmad&gt; 3.8.0-1.mga2:
</I>&gt;<i> &gt; + Revision: 117993
</I>&gt;<i> &gt; - Update to 3.8.0, fixes:
</I>&gt;<i> &gt; &#160; CVE-2011-1098
</I>&gt;<i> &gt; &#160; CVE-2011-1154
</I>&gt;<i> &gt; &#160; CVE-2011-1155
</I>&gt;<i> &gt; - Drop patch0, fixed upstream
</I>&gt;<i> &gt; - Add BR acl-devel and compile with WITH_ACL
</I>&gt;<i> &gt; - Put 'make test' in a %check section
</I>&gt;<i> 
</I>&gt;<i> FWIW, I couldn't extract the commits from upstream SVN[1] that fixed
</I>&gt;<i> those three CVE's (the upstream svn log isn't that clear to me..), so
</I>&gt;<i> I can't backport the fixes to mga1.
</I>
There are patchs on redhat bugzilla.

CVE-2011-1098:
<A HREF="https://bugzilla.redhat.com/show_bug.cgi?id=680798">https://bugzilla.redhat.com/show_bug.cgi?id=680798</A>

CVE-2011-1154:
<A HREF="https://bugzilla.redhat.com/show_bug.cgi?id=680796">https://bugzilla.redhat.com/show_bug.cgi?id=680796</A>

CVE-2011-1155:
<A HREF="https://bugzilla.redhat.com/show_bug.cgi?id=680797">https://bugzilla.redhat.com/show_bug.cgi?id=680797</A>

</PRE>





























<!--endarticle-->
    <HR>
    <P><UL>
        <!--threads-->
	<LI>Previous message: <A HREF="006378.html">[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2
</A></li>
	<LI>Next message: <A HREF="006381.html">[Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2
</A></li>
         <LI> <B>Messages sorted by:</B> 
              <a href="date.html#6379">[ date ]</a>
              <a href="thread.html#6379">[ thread ]</a>
              <a href="subject.html#6379">[ subject ]</a>
              <a href="author.html#6379">[ author ]</a>
         </LI>
       </UL>

<hr>
<a href="https://www.mageia.org/mailman/listinfo/mageia-dev">More information about the Mageia-dev
mailing list</a><br>
</body></html>