On Thu, Jul 07, 2011 at 11:56:24PM -0400, Eric Bélanger wrote:
> Hi,
> 
> logrotate 3.8.0-1 is in testing. Changes:
> - Upstream update
> - Added check function
> 
> Please test and signoff.
> 
> Eric
> 
> 3.7.9 -> 3.8.0
>               - added "dateyesterday" option (see man page)
>               - fixed crash when config file had exactly 4096*N bytes
>               - added WITH_ACL make option to link against -lacl and preserve 
> ACLs
>                 during rotation
>               - added "su" option to define user/group for rotation. 
> Logrotate now
>                 skips directories which are world writable or writable by 
> group
>                 which is not "root" unless "su" directive is used.
>               - fixed CVE-2011-1098: race condition by creation of new files
>               - fixed possible shell injection when using "shred"
> directive (CVE-2011-1154)
>               - fixed escaping of file names within 'write state' action
> (CVE-2011-1155)
>               - better 'size' directive description
>               - fixed possible buffer-overflow when reading config files
>               - NetBSD/FreeBSD compilation fixes
>               - Solaris compilation fixes

Signoff x86_64. Logs still rotate. Just encountered the need for the
'su' directive too.

dave

Reply via email to