Skip to content
OpenAdvisories
Unscored RHSA-2011:0407 3 CVEs

Red Hat Security Advisory: logrotate security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · RHEL 6 enterprise_linux:6::client logrotate 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::client logrotate-debuginfo 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode logrotate 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::computenode logrotate-debuginfo 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server logrotate 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::server logrotate-debuginfo 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation logrotate 0:3.7.8-12.el6_0.1
Red Hat · RHEL 6 enterprise_linux:6::workstation logrotate-debuginfo 0:3.7.8-12.el6_0.1

Vulnerabilities 3

  • Unscored —
    CVE-2011-1098

    Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to rea…

    logrotate Debian
  • Unscored —
    CVE-2011-1154

    The shred_file function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execut…

    logrotate Debian
  • Unscored —
    CVE-2011-1155

    The writeState function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to cause …

    logrotate Debian

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680796
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680797
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=680798
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_0407.json
  • report
    https://access.redhat.com/security/cve/CVE-2011-1098
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1098
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1098
  • report
    https://access.redhat.com/security/cve/CVE-2011-1154
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1154
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1154
  • report
    https://access.redhat.com/security/cve/CVE-2011-1155
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2011-1155
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2011-1155