Synopsis: Important: logwatch security update
Issue Date: 2011-03-07
CVE Numbers: CVE-2011-1018
—
Logwatch is a customizable log analysis system. Logwatch parses through
your system’s logs for a given period of time and creates a report
analyzing areas that you specify, in as much detail as you require.
A flaw was found in the way Logwatch processed log files. If an attacker
were able to create a log file with a malicious file name, it could result
in arbitrary code execution with the privileges of the root user when that
log file is analyzed by Logwatch. (CVE-2011-1018)
Users of logwatch should upgrade to this updated package, which contains a
backported patch to resolve this issue.
—
SL5
noarch
logwatch-7.3-9.el5_6.noarch.rpm
SL6
noarch
logwatch-7.3.6-49.el6.noarch.rpm
– Scientific Linux Development Team
