USN-663-1: system-tools-backends regression


 
Thread Tools Search this Thread
Special Forums Cybersecurity Security Advisories (RSS) USN-663-1: system-tools-backends regression
# 1  
Old 11-05-2008
USN-663-1: system-tools-backends regression

Description:
===========================================================Ubuntu Security Notice USN-663-1 November 05, 2008system-tools-backends regressionhttps://launchpad.net/bugs/287134===========================================================A security issue affects the following Ubuntu releases:Ubuntu 8.10This advisory also applies to the corresponding versions ofKubuntu, Edubuntu, and Xubuntu.The problem can be corrected by upgrading your system to thefollowing package versions:Ubuntu 8.10: system-tools-backends 2.6.0-1ubuntu1.1In general, a standard system upgrade is sufficient to effect thenecessary changes.Details follow:It was discovered that passwords changed (or new users created) via the"Users and Groups" tool were created with 3DES hashing. This reduced thesecurity of stored user passwords, and was a regression from the correctMD5 hashing. This update fixes the problem; future password changeswill correct the hashing used. We apologize for the inconvenience.





More...
Login or Register to Ask a Question

Previous Thread | Next Thread
Login or Register to Ask a Question
INTRO(1)						    BSD General Commands Manual 						  INTRO(1)

NAME
intro -- introduction to general commands (tools and utilities) DESCRIPTION
Section one of the manual contains most of the commands which comprise the BSD user environment. Some of the commands included in section one are text editors, command shell interpreters, searching and sorting tools, file manipulation commands, system status commands, remote file copy commands, mail commands, compilers and compiler tools, formatted output tools, and line printer commands. All commands set a status value upon exit which may be tested to see if the command completed normally. Traditionally, the value 0 signifies successful completion of the command, while a value >0 indicates an error. Some commands attempt to describe the nature of the failure by using exit codes as defined in sysexits(3), while others simply set the status to an arbitrary value >0 (typically 1). SEE ALSO
apropos(1), man(1), intro(2), intro(3), sysexits(3), intro(4), intro(5), intro(6), intro(7), security(7), intro(8), intro(9) Tutorials in the UNIX User's Manual Supplementary Documents. HISTORY
The intro manual page appeared in Version 6 AT&T UNIX. BSD
October 21, 2001 BSD