Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 10: 2010-4081 Major: PPTP Client Permissions Fix

fedora
Calendar Grey April 9, 2009
Dist Fedora Esm H88
An essential patch for Fedora 10 that rectifies access control in pptpsetup, enhancing user security and system integrity.
This update corrects the behaviour of pptpsetup when its --delete option is used, retaining the permissions of /etc/ppp/chap-secrets rather than creating a new file that is likel...

Summary

Client for the proprietary Microsoft Point-to-Point Tunneling

Protocol, PPTP. Allows connection to a PPTP based VPN as used

by employers and some cable and ADSL service providers.

This update corrects the behaviour of pptpsetup when its --delete option is

used, retaining the permissions of /etc/ppp/chap-secrets rather than creating a

new file that is likely to be world-readable. If you have previously used the

--delete option of pptpsetup, you should reset the permissions of /etc/ppp/chap-secrets to their default value of 0600 unless you have good reasons to use

another value: # chmod 600 /etc/ppp/chap-secrets

* Wed Mar 25 2009 Paul Howarth 1.7.2-5

- Retain permissions on /etc/ppp/chap-secrets when using pptpsetup (#492090)

- Use upstream versions of patches

- Re-enable parallel build; Makefile dependencies now fixed

- Use perl rather than sed to edit Makefile, for spec compatibility with

ancient distro releases

* Thu Feb 26 2009 Fedora Release Engineering - 1.7.2-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

[ 1 ] Bug #492090 - passwords stored in world readable file

https://bugzilla.redhat.com/show_bug.cgi?id=492090

su -c 'yum update pptp' at the command line.

For more information, refer to "Managing Software with yum",

available at .

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

Fedora-package-announce mailing list

Fedora-package-announce@redhat.com

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 10
Version: 1.7.2
Release: 5.fc10
URL:
Summary: Point-to-Point Tunneling Protocol (PPTP) Client

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here