[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: rawhide report: 20070120 changes



Tomas Mraz wrote:

>> I've installed this update yesterday in the evening and today
>> there were already rootkits and irc bots everywhere :)
>>
> Well it is not just you. And I am ashamed I didn't catch this problem
> when reviewing changes in new upstream version. :( It won't allow anyone
> to any account but only accounts with only two characters in passwd
> field - like !! and similar. It is very serious anyway.

Luckly, thanks to the "many eyes make all bugs shallow" it's been caught
very quickly.  Unfortunately, those eyeballs were those of several script
kiddies :-)))


> Should be fixed in pam-0.99.7.0-2.fc7.

Confirmed.

-- 
   // Bernardo Innocenti - Develer S.r.l., R&D dept.
 \X/  http://www.develer.com/


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]