Ubuntu
logwatch package

missing named filter/service patterns

Bug #584229 reported by greenmoss on 2010-05-22

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	logwatch	Unknown	Unknown	sf #3032299
	logwatch (Ubuntu)	Fix Released	Low	Unassigned

Bug Description

Binary package hint: logwatch

It seems named logging changed a little bit; enough to confuse some existing logwatch named filters. I have fixed this for some recurring rules on my machine. I will attach the output of diff:

diff -ruN /usr/share/logwatch/scripts/services/named /etc/logwatch/scripts/services/named

ProblemType: Bug
DistroRelease: Ubuntu 10.04
Package: logwatch 7.3.6.cvs20090906-1ubuntu2
ProcVersionSignature: Ubuntu 2.6.32-22.33-generic 2.6.32.11+drm33.2
Uname: Linux 2.6.32-22-generic x86_64
Architecture: amd64
Date: Sat May 22 10:22:26 2010
PackageArchitecture: all
ProcEnviron:
LANG=en_US.utf8
SHELL=/bin/bash
SourcePackage: logwatch

Tags:

Related branches

lp:~sbeattie/ubuntu/natty/logwatch/logwatch-fixups

Merged into lp:ubuntu/natty/logwatch at revision 15

Martin Pitt: Approve on 2011-03-02

lp:ubuntu/natty/logwatch

CVE References

2011-1018

Revision history for this message

greenmoss (ktyubuntu) wrote on 2010-05-22:

Dependencies.txt Edit (1.0 KiB, text/plain; charset="utf-8")

Revision history for this message

greenmoss (ktyubuntu) wrote on 2010-05-22:

output of "diff -ruN /usr/share/logwatch/scripts/services/named /etc /logwatch/scripts/services/named" Edit (2.2 KiB, text/plain)

Scott Moser (smoser) on 2010-05-27

Changed in logwatch (Ubuntu):
status:	New → Triaged
importance:	Undecided → Medium

Revision history for this message

David Futcher (bobbo) wrote on 2010-06-08:

As far as I can see, that attachment is to illustrate the bug not fix it? I have therefore removed the "patch" flag from the attachment. If I have gotten this wrong, please feel free to change it back. Thanks for the bug report!

Revision history for this message

greenmoss (ktyubuntu) wrote on 2010-06-08:

The patch fixes the bug.

Revision history for this message

Mathias Gug (mathiaz) wrote on 2010-07-08:

Thank you for taking the time to report this bug and helping to make Ubuntu better. The issue you are reporting is an upstream one and it would be nice if somebody having it could send the bug to the developers of the software:

http://sourceforge.net/tracker/?group_id=312875&atid=1316824.

If you have done so, please tell us the number of the upstream bug (or the link), so we can add a bugwatch that will inform us about its status. Thanks in advance.

tags:	added: patch removed: amd64 apport-bug lucid
Changed in logwatch (Ubuntu):
importance:	Medium → Low
tags:	added: patch-needsforwarding-upstream

Revision history for this message

Victor Vargas (kamus) wrote on 2010-07-20:

I have sent this issue to upstream tracker for you.

Changed in logwatch:
importance:	Undecided → Unknown
status:	New → Unknown
tags:	added: patch-forwarded-upstream removed: patch-needsforwarding-upstream

Bilal Akhtar (bilalakhtar) on 2010-08-08

Changed in logwatch (Ubuntu):
status:	Triaged → In Progress
assignee:	nobody → Bilal Akhtar (bilalakhtar)

Bilal Akhtar (bilalakhtar) on 2010-08-10

Changed in logwatch (Ubuntu):
assignee:	Bilal Akhtar (bilalakhtar) → nobody
status:	In Progress → Triaged

Revision history for this message

Steve Beattie (sbeattie) wrote on 2011-03-01:

It looks like, with the exception of the added "success resolving after reducing the advertised EDNS UDP packet size" pattern, these issues got fixed upstream differently in http://logwatch.svn.sourceforge.net/viewvc/logwatch/scripts/services/named?r1=11&r2=15 ; however, those fixes have not propagated back down through the debian package.

Revision history for this message

Steve Beattie (sbeattie) wrote on 2011-03-01:

Ah, and it looks like the "success resolving after reducing the advertised EDNS UDP packet size" pattern got fixed in "success resolving after reducing the advertised EDNS UDP packet size" pattern in http://logwatch.svn.sourceforge.net/viewvc/logwatch/scripts/services/named?r1=1&r2=3 .

Revision history for this message

Launchpad Janitor (janitor) wrote on 2011-03-02:

This bug was fixed in the package logwatch - 7.3.6.cvs20090906-1ubuntu4

---------------
logwatch (7.3.6.cvs20090906-1ubuntu4) natty; urgency=low

  * SECURITY UPDATE: privileged code execution via badly named logfiles
    - scripts/logwatch.pl: encapsulate logfiles in 's and ensure logfile
      names don't contain '.
    - http://logwatch.svn.sourceforge.net/viewvc/logwatch?view=revision&revision=26
    - CVE-2011-1018
  * debian/dist.conf/services/cron.conf: adjust to capture cron entries,
    thanks to Oliver Brakmann (LP: #719898)
  * scripts/services/named: update to upstream version to correctly
    capture more information (LP: #584229)
    - http://logwatch.svn.sourceforge.net/viewvc/logwatch/scripts/services/named?revision=19
  * logwatch.8: replace examples containing obsolete --print argument
    with --output=stdout (LP: #564796)
-- Steve Beattie <email address hidden> Wed, 02 Mar 2011 13:44:53 +0100