[SECURITY] Fedora Core 4 Update: sudo-1.6.8p8-2.2

Karel Zak kzak at redhat.com
Tue Jun 21 18:06:34 UTC 2005


---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-473
2005-06-21
---------------------------------------------------------------------

Product     : Fedora Core 4
Name        : sudo
Version     : 1.6.8p8
Release     : 2.2
Summary     : Allows restricted root access for specified users.
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis.  It is not a replacement for the shell.  Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.

---------------------------------------------------------------------

* Tue Jun 21 2005 Karel Zak <kzak at redhat.com> 1.6.8p8-2.2

- fix #161116 - CAN-2005-1993 sudo trusted user arbitrary command execution


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/4/

559f249ff294bbe3d4e656246a923082  SRPMS/sudo-1.6.8p8-2.2.src.rpm
de408134c434cea2b1ed8d17d95b477a  ppc/sudo-1.6.8p8-2.2.ppc.rpm
1c2a778cf3e51af35ac8b114cee4ba20  ppc/debug/sudo-debuginfo-1.6.8p8-2.2.ppc.rpm
558b31097f4174f5c391c22c6c53cfe1  x86_64/sudo-1.6.8p8-2.2.x86_64.rpm
95bbcc2ff79deee94c23ced8db72c14b  x86_64/debug/sudo-debuginfo-1.6.8p8-2.2.x86_64.rpm
6791e18e0bb604c38183e28638e9750a  i386/sudo-1.6.8p8-2.2.i386.rpm
3be32b8c99f2228b91e31d3c01b25374  i386/debug/sudo-debuginfo-1.6.8p8-2.2.i386.rpm

This update can also be installed with the Update Agent; you can
launch the Update Agent with the 'up2date' command.
---------------------------------------------------------------------




More information about the fedora-announce-list mailing list