]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
logrotate: upgrade 3.19.0 -> 3.20.1
authorwangmy <wangmy@fujitsu.com>
Mon, 30 May 2022 06:40:47 +0000 (14:40 +0800)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Tue, 31 May 2022 14:23:34 +0000 (15:23 +0100)
Changelog:
=========
drop world-readable permission on state file even when ACLs are enabled (#446)
fix potential DoS from unprivileged users via the state file (CVE-2022-1348)
fix a misleading debug message with copytruncate and rotate 0 (#443)
add support for unsigned time_t (#438)
do not lock state file /dev/null (#433)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-extended/logrotate/logrotate_3.20.1.bb [moved from meta/recipes-extended/logrotate/logrotate_3.19.0.bb with 97% similarity]

similarity index 97%
rename from meta/recipes-extended/logrotate/logrotate_3.19.0.bb
rename to meta/recipes-extended/logrotate/logrotate_3.20.1.bb
index 2a60d9b31f06c4b1e72b530591b36281f0c191ae..35977535aa29fd66dcadcd9dd888d7e3d8b11bc2 100644 (file)
@@ -15,7 +15,7 @@ UPSTREAM_CHECK_REGEX = "logrotate-(?P<pver>\d+(\.\d+)+).tar"
 
 SRC_URI = "https://github.com/${BPN}/${BPN}/releases/download/${PV}/${BP}.tar.xz"
 
-SRC_URI[sha256sum] = "ddd5274d684c5c99ca724e8069329f343ebe376e07493d537d9effdc501214ba"
+SRC_URI[sha256sum] = "742f6d6e18eceffa49a4bacd933686d3e42931cfccfb694d7f6369b704e5d094"
 
 # These CVEs are debian, gentoo or SUSE specific on the way logrotate was installed/used
 CVE_CHECK_IGNORE += "CVE-2011-1548 CVE-2011-1549 CVE-2011-1550"