Commit Graph

2 Commits

Author SHA1 Message Date
Wenzong Fan bac191afc6 logrotate: fix for CVE-2011-1548
If a logfile is a symlink, it may be read when being compressed, being
copied (copy, copytruncate) or mailed. Secure data (eg. password files)
may be exposed.

Portback nofollow.patch from:
http://logrotate.sourcearchive.com/downloads/3.8.1-5/logrotate_3.8.1-5.debian.tar.gz

(From OE-Core rev: d0e3fc1b28fc16200adbe690aa27124041036ba3)

Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com>
Signed-off-by: Saul Wold <sgw@linux.intel.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2013-06-25 17:44:55 +01:00
Robert Yang 7f33f59c7a upgrade logrotate: update the recipe
update the recipe:
ogrotate_3.7.9.bb -> logrotate_3.8.1.bb

(From OE-Core rev: 9dc1a8c793e1908032be0f0ea3b3f0832b1bf5aa)

Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2012-03-19 14:37:36 +00:00