Re: [Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2

2011-07-06 Thread Ahmad Samir
On 4 July 2011 08:25, Mageia Team buildsystem-dae...@mageia.org wrote:
 Name        : logrotate                    Relocations: (not relocatable)
 Version     : 3.8.0                             Vendor: Mageia.Org
 Release     : 1.mga2                        Build Date: Mon Jul  4 08:24:04 
 2011
 Install Date: (not installed)               Build Host: ecosse
 Group       : File tools                    Source RPM: (none)
 Size        : 55428                            License: GPLv2
 Signature   : (none)
 Packager    : Mageia Team http://www.mageia.org
 URL         : https://fedorahosted.org/logrotate/
 Summary     : Rotates, compresses, removes and mails system log files
 Description :
 The logrotate utility is designed to simplify the administration of
 log files on a system which generates a lot of log files.  Logrotate
 allows for the automatic rotation compression, removal and mailing of
 log files.  Logrotate can be set to handle a log file daily, weekly,
 monthly or when the log file gets to a certain size.  Normally,
 logrotate runs as a daily cron job.

 Install the logrotate package if you need a utility to deal with the
 log files on your system.

 ahmad ahmad 3.8.0-1.mga2:
 + Revision: 117993
 - Update to 3.8.0, fixes:
   CVE-2011-1098
   CVE-2011-1154
   CVE-2011-1155
 - Drop patch0, fixed upstream
 - Add BR acl-devel and compile with WITH_ACL
 - Put 'make test' in a %check section

FWIW, I couldn't extract the commits from upstream SVN[1] that fixed
those three CVE's (the upstream svn log isn't that clear to me..), so
I can't backport the fixes to mga1.

[1] http://svn.fedorahosted.org/svn/logrotate/

-- 
Ahmad Samir


Re: [Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2

2011-07-06 Thread nicolas vigier
On Wed, 06 Jul 2011, Ahmad Samir wrote:

 On 4 July 2011 08:25, Mageia Team buildsystem-dae...@mageia.org wrote:
  Name        : logrotate                    Relocations: (not relocatable)
  Version     : 3.8.0                             Vendor: Mageia.Org
  Release     : 1.mga2                        Build Date: Mon Jul  4 08:24:04 
  2011
  Install Date: (not installed)               Build Host: ecosse
  Group       : File tools                    Source RPM: (none)
  Size        : 55428                            License: GPLv2
  Signature   : (none)
  Packager    : Mageia Team http://www.mageia.org
  URL         : https://fedorahosted.org/logrotate/
  Summary     : Rotates, compresses, removes and mails system log files
  Description :
  The logrotate utility is designed to simplify the administration of
  log files on a system which generates a lot of log files.  Logrotate
  allows for the automatic rotation compression, removal and mailing of
  log files.  Logrotate can be set to handle a log file daily, weekly,
  monthly or when the log file gets to a certain size.  Normally,
  logrotate runs as a daily cron job.
 
  Install the logrotate package if you need a utility to deal with the
  log files on your system.
 
  ahmad ahmad 3.8.0-1.mga2:
  + Revision: 117993
  - Update to 3.8.0, fixes:
    CVE-2011-1098
    CVE-2011-1154
    CVE-2011-1155
  - Drop patch0, fixed upstream
  - Add BR acl-devel and compile with WITH_ACL
  - Put 'make test' in a %check section
 
 FWIW, I couldn't extract the commits from upstream SVN[1] that fixed
 those three CVE's (the upstream svn log isn't that clear to me..), so
 I can't backport the fixes to mga1.

There are patchs on redhat bugzilla.

CVE-2011-1098:
https://bugzilla.redhat.com/show_bug.cgi?id=680798

CVE-2011-1154:
https://bugzilla.redhat.com/show_bug.cgi?id=680796

CVE-2011-1155:
https://bugzilla.redhat.com/show_bug.cgi?id=680797



Re: [Mageia-dev] [RPM] cauldron core/release logrotate-3.8.0-1.mga2

2011-07-06 Thread Ahmad Samir
On 6 July 2011 11:29, nicolas vigier bo...@mars-attacks.org wrote:
 On Wed, 06 Jul 2011, Ahmad Samir wrote:

 On 4 July 2011 08:25, Mageia Team buildsystem-dae...@mageia.org wrote:
  Name        : logrotate                    Relocations: (not relocatable)
  Version     : 3.8.0                             Vendor: Mageia.Org
  Release     : 1.mga2                        Build Date: Mon Jul  4 
  08:24:04 2011
  Install Date: (not installed)               Build Host: ecosse
  Group       : File tools                    Source RPM: (none)
  Size        : 55428                            License: GPLv2
  Signature   : (none)
  Packager    : Mageia Team http://www.mageia.org
  URL         : https://fedorahosted.org/logrotate/
  Summary     : Rotates, compresses, removes and mails system log files
  Description :
  The logrotate utility is designed to simplify the administration of
  log files on a system which generates a lot of log files.  Logrotate
  allows for the automatic rotation compression, removal and mailing of
  log files.  Logrotate can be set to handle a log file daily, weekly,
  monthly or when the log file gets to a certain size.  Normally,
  logrotate runs as a daily cron job.
 
  Install the logrotate package if you need a utility to deal with the
  log files on your system.
 
  ahmad ahmad 3.8.0-1.mga2:
  + Revision: 117993
  - Update to 3.8.0, fixes:
    CVE-2011-1098
    CVE-2011-1154
    CVE-2011-1155
  - Drop patch0, fixed upstream
  - Add BR acl-devel and compile with WITH_ACL
  - Put 'make test' in a %check section

 FWIW, I couldn't extract the commits from upstream SVN[1] that fixed
 those three CVE's (the upstream svn log isn't that clear to me..), so
 I can't backport the fixes to mga1.

 There are patchs on redhat bugzilla.

 CVE-2011-1098:
 https://bugzilla.redhat.com/show_bug.cgi?id=680798

 CVE-2011-1154:
 https://bugzilla.redhat.com/show_bug.cgi?id=680796

 CVE-2011-1155:
 https://bugzilla.redhat.com/show_bug.cgi?id=680797



OK, thanks.

-- 
Ahmad Samir