[UCI-Linux] [SECURITY] Fedora Core 3 Update: sudo-1.6.7p5-30.3

[Mike Iglesias]

From: Karel Zak <kzak at redhat.com>
To: fedora-announce-list at redhat.com
Date: Tue, 21 Jun 2005 14:04:48 -0400
Subject: [SECURITY] Fedora Core 3 Update: sudo-1.6.7p5-30.3

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-472
2005-06-21
---------------------------------------------------------------------

Product     : Fedora Core 3
Name        : sudo
Version     : 1.6.7p5
Release     : 30.3
Summary     : Allows restricted root access for specified users.
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis.  It is not a replacement for the shell.  Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.

---------------------------------------------------------------------

* Tue Jun 21 2005 Karel Zak <kzak at redhat.com> 1.6.7p5-30.3

- fix #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

27d3ac5cf6a5fa1f1a64e0ef9d7d376f  SRPMS/sudo-1.6.7p5-30.3.src.rpm
fa32f996cff5742f020255c7158f19f3  x86_64/sudo-1.6.7p5-30.3.x86_64.rpm
ddc89a1195e89afc5763a2f3f578793c  x86_64/debug/sudo-debuginfo-1.6.7p5-30.3.x86_64.rpm
2bcc58a51241cdfc1a27b2d964e3a3ae  i386/sudo-1.6.7p5-30.3.i386.rpm
bf4d6a03b0a23e0475b85a06b6650257  i386/debug/sudo-debuginfo-1.6.7p5-30.3.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------

--
fedora-announce-list mailing list
fedora-announce-list at redhat.com
http://www.redhat.com/mailman/listinfo/fedora-announce-list