Issued:
2010-01-13
Updated:
2010-03-30

RHBA-2010:0033 - logwatch bug fix and enhancement update

Synopsis

logwatch bug fix and enhancement update

Type/Severity

Bug Fix Advisory (none)

Topic

An updated logwatch package that fixes various bugs and adds an enhancement is now available.

Description

LogWatch is a customizable log analysis system. LogWatch parses through your system's logs for a given period of time and creates a report analyzing areas that you specify, in as much detail as you require.

This updated logwatch package includes fixes for the following bugs:

  • .hdr files are headers for RPM packages; they are essentially metadata. LogWatch's HTTP service parser emitted warnings for .hdr files, even when the "Detail" parameter was set to "Low". With this update, .hdr files are now parsed as archives, which removes spurious warnings about .hdr files. (BZ#465212)

  • the following missing directories have been added under the /etc/logwatch/scripts/ directory: "logfiles", "services" and "shared". This mirrors the subdirectory structure of the /usr/share/logwatch/scripts/ directory, and also corresponds to the existing documentation. (BZ#489490)

  • LogWatch attempted to interpret certain compressed log files as plain text log files, which resulted in binary information being written to LogWatch output. With this update, LogWatch correctly decompresses these compressed log files before attempting to read and interpret them. (BZ#511928)

In addition, this updated logwatch package provides the following enhancement: * LogWatch is now able to parse several new and previously-unmatched entries in the postfix, dovecot and up2date application logs. (BZ#460993, BZ#424031, BZ#466455)

All users of logwatch are advised to upgrade to this updated package, which resolves these issues and provides this enhancement.

Solution

Before applying this update, make sure that all previously-released errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at This content is not included.http://kbase.redhat.com/faq/docs/DOC-11259

Affected Products

ProductVersionArch
Red Hat Enterprise Linux for Power, big endian5ppc
Red Hat Enterprise Linux for IBM z Systems5s390x
Red Hat Enterprise Linux Workstation5x86_64
Red Hat Enterprise Linux Workstation5i386
Red Hat Enterprise Linux Server5x86_64
Red Hat Enterprise Linux Server5ia64
Red Hat Enterprise Linux Server5i386
Red Hat Enterprise Linux Server from RHUI5x86_64
Red Hat Enterprise Linux Server from RHUI5i386
Red Hat Enterprise Linux Desktop5x86_64
Red Hat Enterprise Linux Desktop5i386

Updated Packages

  • logwatch-7.3-8.el5.noarch.rpm
  • logwatch-7.3-8.el5.src.rpm

Fixes

CVEs

(none)

References

(none)

Additional information