summaryrefslogtreecommitdiffstats
path: root/meta/recipes-extended/logrotate
diff options
context:
space:
mode:
authorwangmy <wangmy@fujitsu.com>2022-05-30 14:40:47 +0800
committerRichard Purdie <richard.purdie@linuxfoundation.org>2022-05-31 15:24:18 +0100
commit1abf09d4cff8b9e40ea6c1826cfeae8e0ce18f1b (patch)
tree6d9decf1b54eeb8f6a0c2503fa311077fbcdf389 /meta/recipes-extended/logrotate
parentdd6f2f61e03a8f3db3bc2282273f5dce078241ee (diff)
downloadpoky-1abf09d4cff8b9e40ea6c1826cfeae8e0ce18f1b.tar.gz
logrotate: upgrade 3.19.0 -> 3.20.1
Changelog: ========= drop world-readable permission on state file even when ACLs are enabled (#446) fix potential DoS from unprivileged users via the state file (CVE-2022-1348) fix a misleading debug message with copytruncate and rotate 0 (#443) add support for unsigned time_t (#438) do not lock state file /dev/null (#433) (From OE-Core rev: 391fdcf742c4669c1c4654f9b022b3d277aa0038) Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
Diffstat (limited to 'meta/recipes-extended/logrotate')
-rw-r--r--meta/recipes-extended/logrotate/logrotate_3.20.1.bb (renamed from meta/recipes-extended/logrotate/logrotate_3.19.0.bb)2
1 files changed, 1 insertions, 1 deletions
diff --git a/meta/recipes-extended/logrotate/logrotate_3.19.0.bb b/meta/recipes-extended/logrotate/logrotate_3.20.1.bb
index 2a60d9b31f..35977535aa 100644
--- a/meta/recipes-extended/logrotate/logrotate_3.19.0.bb
+++ b/meta/recipes-extended/logrotate/logrotate_3.20.1.bb
@@ -15,7 +15,7 @@ UPSTREAM_CHECK_REGEX = "logrotate-(?P<pver>\d+(\.\d+)+).tar"
15 15
16SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.xz" 16SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.xz"
17 17
18SRC_URI[sha256sum] = "ddd5274d684c5c99ca724e8069329f343ebe376e07493d537d9effdc501214ba" 18SRC_URI[sha256sum] = "742f6d6e18eceffa49a4bacd933686d3e42931cfccfb694d7f6369b704e5d094"
19 19
20# These CVEs are debian, gentoo or SUSE specific on the way logrotate was installed/used 20# These CVEs are debian, gentoo or SUSE specific on the way logrotate was installed/used
21CVE_CHECK_IGNORE += "CVE-2011-1548 CVE-2011-1549 CVE-2011-1550" 21CVE_CHECK_IGNORE += "CVE-2011-1548 CVE-2011-1549 CVE-2011-1550"