OESA-2022-1724

See a problem?
Please try reporting it to the source first.

Source

https://www.openeuler.org/en/security/security-bulletins/detail/?id=openEuler-SA-2022-1724

Import Source

https://repo.openeuler.org/security/data/osv/OESA-2022-1724.json

JSON Data

https://api.osv.dev/v1/vulns/OESA-2022-1724

Upstream

CVE-2022-1348

Published

2022-06-24T11:03:55Z

Modified

2025-09-03T06:17:54.713422Z

Summary

logrotate security update

Details

The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files.logrotate Logrotate can be set to handle a log file daily, weekly, monthly or when the log file gets to a certain size.

Security Fix(es):

A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.(CVE-2022-1348)

Database specific

{
    "severity": "Medium"
}

References

Affected packages

openEuler:22.03-LTS / logrotate

Package

Name: logrotate
Purl: pkg:rpm/openEuler/logrotate&distro=openEuler-22.03-LTS

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

3.20.1-1.oe2203

Ecosystem specific

{
    "aarch64": [
        "logrotate-debuginfo-3.20.1-1.oe2203.aarch64.rpm",
        "logrotate-3.20.1-1.oe2203.aarch64.rpm",
        "logrotate-debugsource-3.20.1-1.oe2203.aarch64.rpm"
    ],
    "noarch": [
        "logrotate-help-3.20.1-1.oe2203.noarch.rpm"
    ],
    "x86_64": [
        "logrotate-debugsource-3.20.1-1.oe2203.x86_64.rpm",
        "logrotate-debuginfo-3.20.1-1.oe2203.x86_64.rpm",
        "logrotate-3.20.1-1.oe2203.x86_64.rpm"
    ],
    "src": [
        "logrotate-3.20.1-1.oe2203.src.rpm"
    ]
}