[CentOS] Bug in yum Logwatch reporting

Robert Nichols rnicholsNOSPAM at comcast.net
Fri Apr 3 18:28:00 UTC 2009

Brett Serkez wrote:
> I've been noticing yum updates on several servers I manage over the
> last few weeks, which I know I didn't perform and could not explain
> until this morning.  At first I suspect a break-in, but found no other
> evidence or reason an intruder would run the yum updates I was
> viewing.
> Yum updates are logged in /var/log/yum.log, which is what Logwatch
> scans.  Seems that the format of the log entries is: "MMM DD", the
> year is missing!   This morning looking at this log sequentially I
> noticed I did do yum updates on Apr 02 and Apr 03 as reported in last
> night's logwatch, but not April of 2009, but rather April of 2008!
> Has anyone else noticed this behavior and/or know if there is a fix in
> progress for it?

That's why the logrotate default for yum.log was changed to "yearly"
in the 5.3 updates.

Bob Nichols     "NOSPAM" is really part of my email address.
                 Do NOT delete it.

More information about the CentOS mailing list