Fedora Core 5: 2006-188 Moderate: Beagle Script Security Fix

A general infrastructure for making your data easy to find.

Some of the wrapper scripts (including beagle-status) looked

in the current directory for files with a specific name and

ran that instead of the binary in the path. All such cases

have been fixed in this release.

- Remove more instances of wrapper scripts starting apps in cwd.

Fixes bug #185981, and CVE-2006-1296

* Fri Mar 17 2006 Ray Strode - 0.2.3-3

- use /sbin/nologin instead of /bin/nologin for beagle user

shell

* Fri Mar 17 2006 Ray Strode - 0.2.3-2

- use /bin/nologin instead of /bin/false for beagle user

shell

* Fri Mar 17 2006 Ray Strode - 0.2.3-1

- Update to 0.2.3

031b14c13c1da8a0ad078d29e7c8997f81edc108 SRPMS/beagle-0.2.3-4.src.rpm

9c05aceec3352a5822bd715bb8f1d7a7ab3b1c15 ppc/beagle-0.2.3-4.ppc.rpm

fa966f7a58099c9b24324e776d5bd3bba0ed6737 ppc/libbeagle-0.2.3-4.ppc.rpm

4faf4d0a15ab3a81a75e6b518fa6d447701c5ff7 ppc/libbeagle-devel-0.2.3-4.ppc.rpm

baedc9ecbace7961d15d42020225d1ccf5618a49 ppc/libbeagle-python-0.2.3-4.ppc.rpm

76d01133208326bd31062a9c00f70675fb74b4eb ppc/debug/beagle-debuginfo-0.2.3-4.ppc.rpm

3dd3cd525eb4c94ac2337efcf01006d3e9490a0c x86_64/beagle-0.2.3-4.x86_64.rpm

e782635126ed098076b88a037f04865ea5218d6c x86_64/libbeagle-0.2.3-4.x86_64.rpm

bfecb57a38e4a948517871c350e45aabd86e87cc x86_64/libbeagle-devel-0.2.3-4.x86_64.rpm

25559cbdf4a17e9ab98029a0a4087ec62001c38e x86_64/libbeagle-python-0.2.3-4.x86_64.rpm

724c8bf195af380c55b0ec3e72f1791962f35e63 x86_64/debug/beagle-debuginfo-0.2.3-4.x86_64.rpm

c02e35f99532418d379804a05a9b0f24dd102ae5 i386/beagle-0.2.3-4.i386.rpm

73653a24af6b10772afe5e2c24723c698750ad96 i386/libbeagle-0.2.3-4.i386.rpm

3cbcfc28429f3cd5911c6990110f40b0963d29d3 i386/libbeagle-devel-0.2.3-4.i386.rpm

340d500ecd5c38a8fc3c640b4151d2d2b547d7b8 i386/libbeagle-python-0.2.3-4.i386.rpm

8b42aa3907319ed3d0ac53eb303aa3291a734831 i386/debug/beagle-debuginfo-0.2.3-4.i386.rpm

This update can be installed with the 'yum' update program. Use 'yum update

package-name' at the command line. For more information, refer to 'Managing

Software with yum,' available at .

fedora-announce-list mailing list

fedora-announce-list@redhat.com