K16869 : logrotate vulnerability CVE-2011-1098

Security Advisory Description

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place. (CVE-2011-1098)

Impact

May allow a local user to read log data by opening a file before the intended permissions are in place.