[ubuntu/natty-security] logrotate 3.7.8-6ubuntu3.1 (Accepted)

[Marc Deslauriers]

logrotate (3.7.8-6ubuntu3.1) natty-security; urgency=low

  * SECURITY UPDATE: arbitrary code execution via shell metacharacters in
    log filename
    - debian/patches/CVE-2011-1154.patch: improve shred logic in
      logrotate.c.
    - CVE-2011-1154
  * SECURITY UPDATE: denial of service via invalid characters in log
    filename
    - debian/patches/CVE-2011-1155.patch: properly escape filenames in
      logrotate.c.
    - CVE-2011-1155

Date: Fri, 17 Jun 2011 13:44:50 -0400
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/logrotate/3.7.8-6ubuntu3.1
-------------- next part --------------
Format: 1.8
Date: Fri, 17 Jun 2011 13:44:50 -0400
Source: logrotate
Binary: logrotate
Architecture: source
Version: 3.7.8-6ubuntu3.1
Distribution: natty-security
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Marc Deslauriers <marc.deslauriers at ubuntu.com>
Description: 
 logrotate  - Log rotation utility
Changes: 
 logrotate (3.7.8-6ubuntu3.1) natty-security; urgency=low
 .
   * SECURITY UPDATE: arbitrary code execution via shell metacharacters in
     log filename
     - debian/patches/CVE-2011-1154.patch: improve shred logic in
       logrotate.c.
     - CVE-2011-1154
   * SECURITY UPDATE: denial of service via invalid characters in log
     filename
     - debian/patches/CVE-2011-1155.patch: properly escape filenames in
       logrotate.c.
     - CVE-2011-1155
Checksums-Sha1: 
 29e07bca3ca4f837b5643c19fd32695594a504e6 1814 logrotate_3.7.8-6ubuntu3.1.dsc
 b9cd0d2c094e892112f5b584778e4330617e0c43 24632 logrotate_3.7.8-6ubuntu3.1.debian.tar.gz
Checksums-Sha256: 
 84b3e6a7fc274273699a1589c784b1f9b92f7740418fe6465909beecbb83f069 1814 logrotate_3.7.8-6ubuntu3.1.dsc
 e3e0b90a51295ecb161236a63a4b5a070e1fb89e06aa6e1735c584403c4f35cd 24632 logrotate_3.7.8-6ubuntu3.1.debian.tar.gz
Files: 
 feea9c1dc21549c748d4035c675c9698 1814 admin important logrotate_3.7.8-6ubuntu3.1.dsc
 316420e7ba63fa496a4a174db982eb43 24632 admin important logrotate_3.7.8-6ubuntu3.1.debian.tar.gz
Original-Maintainer: Paul Martin <pm at debian.org>