|
|
 |
 |
 |
 |
 |
Vendor: |
Fedora |
| Vendor ID: |
FEDORA-2005-1147 |
| Title: |
Sudo: perl script subversion FC4 |
| Publishing date: |
December 16, 2005 |
| Published by: |
Nikola Strahija |
|
|
|
 |
|
|  |
 |
|
|
Security Advisory info: Perl scripts run via Sudo can be subverted. Fedora Core 4.
|
---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-1147
2005-12-16
---------------------------------------------------------------------
Product : Fedora Core 4
Name : sudo
Version : 1.6.8p8
Release : 2.4
Summary : Allows restricted root access for specified users.
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.
---------------------------------------------------------------------
* Sat Dec 16 2006 Karel Zak <kzak@redhat.com> 1.6.8p8-2.4
- fix #175295 - SECURITY: CRM 764618: Perl scripts run via Sudo can be subverted
---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/
21d5b27b820f17a3eda2b6ae9b1e7a1b SRPMS/sudo-1.6.8p8-2.4.src.rpm
c154c8dd716167be8b14eec6cf2f8ce6 ppc/sudo-1.6.8p8-2.4.ppc.rpm
28034d7c9dacdffbaf9acb1bd93b9e6a ppc/debug/sudo-debuginfo-1.6.8p8-2.4.ppc.rpm
e2feb677203c37b7a6104c6d17844bde x86_64/sudo-1.6.8p8-2.4.x86_64.rpm
c930455cfb47e95cb19ecc7e2efcde18 x86_64/debug/sudo-debuginfo-1.6.8p8-2.4.x86_64.rpm
88c0117a155eccdd3491a05acc620583 i386/sudo-1.6.8p8-2.4.i386.rpm
66260db738098e0e8320db96ee42c89c i386/debug/sudo-debuginfo-1.6.8p8-2.4.i386.rpm
This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
--------------------------------------------------------------------- |
 |
|
|
|  |