Commit Graph

2 Commits

Author SHA1 Message Date
Wenzong Fan bac191afc6 logrotate: fix for CVE-2011-1548
If a logfile is a symlink, it may be read when being compressed, being
copied (copy, copytruncate) or mailed. Secure data (eg. password files)
may be exposed.

Portback nofollow.patch from:
http://logrotate.sourcearchive.com/downloads/3.8.1-5/logrotate_3.8.1-5.debian.tar.gz

(From OE-Core rev: d0e3fc1b28fc16200adbe690aa27124041036ba3)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-06-25 17:44:55 +01:00
Robert Yang a163d2168f upgrade logrotate: split the old patch into 3
Split the old patch into 3 during upgrading, this makes it easier for
the future's upgrade.

(From OE-Core rev: 2ec5f1eab1f3d2eeff9f3984654a3fb4d87679e7)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-19 14:37:36 +00:00