CVE-2011-1098: Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local...

Security readout for executives and security teams

CVE-2011-1098 is a local information disclosure flaw in logrotate. A timing race could let a local user open a rotated log file before the intended permissions were applied, exposing log data that should have remained restricted. Exposure is most relevant on Unix-like systems running logrotate 3.7.9 or earlier, especially shared servers where untrusted local users exist and rotated logs may contain sensitive operational, application, or authentication data. Treat this as a targeted confidentiality risk, not an internet-scale emergency. Prioritize legacy and shared systems, then remediate through normal package management and logging hygiene. Mitigation focus: Inventory systems running logrotate and identify versions 3.7.9 or earlier.; Apply the fixed package from the operating system or distribution vendor.; Review vendor advisories before assuming a specific patch level or backport status..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.