Chris Adams wrote:
IIRC there was a recent BUGTRAQ notice that there were security holes found in cdrecord when it was setuid root. Have these been fixed in the Fedora version?
Fixed earlier this month.
--------------------------------------------------------------------- Fedora Update Notification FEDORA-2004-298 2004-09-09 ---------------------------------------------------------------------
Product : Fedora Core 2 Name : cdrtools Version : 2.01 Release : 0.a27.4.FC2.3 Summary : A collection of CD/DVD utilities. Description : cdrtools is a collection of CD/DVD utilities.
--------------------------------------------------------------------- Update Information:
Anyone who has manually suid /usr/bin/cdrecord should update to this version.
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0806
<snip>
Cheers
Adam
