==========================================================Ubuntu Security Notice USN-1078-1 March 01, 2011
A security issue affects the following Ubuntu releases:
In general, a standard system update will make all the necessary changes.
Dominik George discovered that logwatch did not properly sanitize
log file names that were passed to the shell as part of a command.
If a remote attacker were able to generate specially crafted filenames
(for example, via Samba logging), they could execute arbitrary code
with root privileges.