sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] SECURITY UPDATE for utils/ntp

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] SECURITY UPDATE for utils/ntp
Date: Fri, 2 Sep 2005 09:44:49 -0700

When ntp received a group by name (which is how the spell sets up the
init script) instead of gid, it drops privileges to the wrong user
sometimes. This affects all users and could lead to a false sense of
security and/or ntp simply not working.

The latest update in all grimoires fixes this issue.

Seth

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Quality Assurance Team Leader & Security Team: Source Mage GNU/linux
Linux so advanced, it may as well be magic http://www.sourcemage.org
Secretary Pacific Green Party of Oregon http://www.pacificgreens.org
Key id FDCEE733 = 5302 B414 64C4 6112 3454 E082 99F0 69DC FDCE E733

Attachment: pgpjDPdGfzkKQ.pgp
Description: PGP signature

[SM-Security] SECURITY UPDATE for utils/ntp, Seth Alan Woolley, 09/02/2005