USN-663-1: system-tools-backends regression

11-05-2008

Registered User

26,240, 27

Join Date: Sep 2000

Last Activity: 1 August 2008, 3:09 PM EDT

Posts: 26,240

Thanks Given: 0

Thanked 27 Times in 26 Posts

USN-663-1: system-tools-backends regression

Description:
===========================================================Ubuntu Security Notice USN-663-1 November 05, 2008system-tools-backends regressionhttps://launchpad.net/bugs/287134===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.10: system-tools-backends 2.6.0-1ubuntu1.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that passwords changed (or new users created) via the"Users and Groups" tool were created with 3DES hashing. This reduced thesecurity of stored user passwords, and was a regression from the correctMD5 hashing. This update fixes the problem; future password changeswill correct the hashing used. We apologize for the inconvenience.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

users-admin(1) User Commands users-admin(1) NAME
users-admin - Configure local users and groups on the system. SYNOPSIS
users-admin [gnome-std-options] DESCRIPTION
users-admin enables the user to configure the local users and groups on the system. I also provides the ability to assign RBAC profiles to a user. OPTIONS
The following options are supported: gnome-std-options Standard options available for use with most GNOME applications. See gnome-std-options(5) for more informa- tion. EXAMPLES
Example 1: Running the main application. example% users-admin EXIT STATUS
The following exit values are returned: 0 Application exited successfully >0 Application exited with failure FILES
The following files are used by this application: /usr/bin/users-admin Executable for users and groups configuration. /var/spool/setup-tool-backends/data/users Where user template configurations are stored. /var/spool/setup-tool-backends/backup/users Backup directory for files that are modified. /var/run/setup-tool-backends/debug/users Debug logs can be found under here. ATTRIBUTES
See attributes(5) for descriptions of the following attributes: +-----------------------------+-----------------------------+ | ATTRIBUTE TYPE | ATTRIBUTE VALUE | +-----------------------------+-----------------------------+ |Availability |SUNWgnome-system-tools | +-----------------------------+-----------------------------+ |Interface stability |Uncommitted | +-----------------------------+-----------------------------+ SEE ALSO
Latest version of the GNOME Desktop User Guide for your platform. time-admin(1), shares-admin(1), services-admin(1), network-admin(1), gnome-std-options(5), useradd(1M), usermod(1M), groupadd(1M), group- mod(1M), passwd(4), shadow(4), group(4), attributes(5) NOTES
YP/NIS, NIS+ and LDAP users should be aware that it's possible to have conflict with users configured in here with the result that an error will occur. You should ensure that local user's home accounts are located on local filesystems - e.g. creating a new entry in /home when it's mounted with automount will not work and as such the user may not be created. Written by Darren Kenny, Sun Microsystems Inc., 2006. SunOS 5.11 6 Nov 2006 users-admin(1)

Security Advisories (RSS)

USN-663-1: system-tools-backends regression

LEARN ABOUT OPENSOLARIS

users-admin