CVE ID:	CVE-2022-1348
Description:	A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world- readable permission, allowing an unprivileged user to lock the state file, stopping any rotation. This flaw affects logrotate versions before 3.20.0.
Test IDs:	1.3.6.1.4.1.25623.1.0.820677   1.3.6.1.4.1.25623.1.0.820713   1.3.6.1.4.1.25623.1.0.845386   1.3.6.1.4.1.25623.1.1.10.2022.0217   1.3.6.1.4.1.25623.1.1.4.2022.2396.1   1.3.6.1.4.1.25623.1.0.854814
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-1348 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZYEB4F37BY6GLEJKP2EPVAVQ6TA3HQKR/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/Y7EHGYRE6DSFSBXQIWYDGTSXKO6IFSJQ/ https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2022-1348 http://www.openwall.com/lists/oss-security/2022/05/25/3 http://www.openwall.com/lists/oss-security/2022/05/25/4 http://www.openwall.com/lists/oss-security/2022/05/25/5