An at security update has been released for Fedora Core 3

---------------------------------------------------------------------
Fedora Update Notification
FEDORA-2005-321
2005-04-15
---------------------------------------------------------------------

Product : Fedora Core 3
Name : at
Version : 3.1.8
Release : 70_FC3
Summary : Job spooling tools.
Description :
At and batch read commands from standard input or from a specified file. At allows you to specify that a command will be run at a particular time. Batch will execute commands when the system load levels drop to a particular level. Both commands use /bin/sh.

You should install the at package if you need a utility for time-oriented job control. Note: If it is a recurring job that will need to be repeated at the same time every day/week, etc. you should use crontab instead.

---------------------------------------------------------------------

o Improved PAM support

---------------------------------------------------------------------

* Fri Apr 8 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-70_FC3

- always call pam_setcred(pamh, PAM_DELETE_CRED) before session
- close

* Tue Apr 5 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-70_FC3

- always call pam_close_session on PAM_FAIL or pam_end

* Tue Mar 8 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-68

- Put PAM authentication check in 'check_permissions()', so
- user can know when using at(1) if PAM permission is denied.

* Tue Mar 8 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-67

- better fix for bug 150131: change DAEMON_USERNAME and
- DAEMON_GROUPNAME to 'root' .

* Mon Mar 7 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-66

- fix bug 150131: atd should not relinquish root privilege if
- doing su(1) equivalent with PAM .

* Tue Jan 25 2005 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-64

- bugs 5160/146132: add PAM authentication control to atd

* Tue Oct 5 2004 Jason Vas Dias lt;jvdias@redhat.comgt; 3.1.8-60

- fix bug 131510: no_export env. var. blacklisting should not
- remove 'SHELL' when only 'SHELLOPTS' is blacklisted.
- at(1) man-page should not say 'commands are run with /bin/sh'
- and should explain usage of SHELL environement variable and
- details of blacklisted variables.

* Tue Sep 28 2004 Rik van Riel lt;riel@redhat.comgt; 3.1.8-58

- fix typo in man page, bug 112303
- (regenerated at-3.1.8-man-timespec-path.patch with fix)

* Tue Aug 3 2004 Jason Vas Dias lt;jvdias@redhat.comgt;

- fixed bug 125634 - made usage() agree with manpage

* Thu Jul 29 2004 Jason Vas Dias lt;jvdias@redhat.comgt;

- Added POSIX.2 -t option for RFE 127485

* Thu Jul 29 2004 Jason Vas Dias lt;jvdias@redhat.comgt;

- Had to disable the 'make test' for the build BEFORE
- any changes were made (building on FC2 - perl issue?)
- test.pl generates these 'errors' for what looks like
- valid output to me:
- $ ./test.pl 2gt;1 | egrep -v '(^ok$)|(time_only)'
- 1..3656
- not ok
- 'Monday - 1 month': 'Fri Jul 2 18:29:00 2004' =? 'Sat Jul 3 18:29:00 2004'
- not ok
- 'Monday - 10 months': 'Thu Oct 2 18:29:00 2003' =? 'Fri Oct 3 18:29:00 2003'
- not ok
- 'next week - 1 month': 'Mon Jul 5 18:29:00 2004' =? 'Tue Jul 6 18:29:00 2004'
- not ok
- 'next week - 10 months': 'Sun Oct 5 18:29:00 2003' =? 'Mon Oct 6 18:29:00 2003'
- will investigate and fix for next release.

* Tue Jun 15 2004 Elliot Lee lt;sopwith@redhat.comgt;

- rebuilt

* Wed May 12 2004 Thomas Woerner lt;twoerner@redhat.comgt; - 3.1.8-54

- fixed pie patch: at is pie, now

- added build requires for libselinux-devel

* Tue May 4 2004 Dan Walsh lt;dwalsh@redhat.comgt; - 3.1.8-53

- Add fileentrypoint check

* Thu Apr 15 2004 Dan Walsh lt;dwalsh@redhat.comgt; - 3.1.8-52

- Fix SELinux patch

* Mon Feb 23 2004 Tim Waugh lt;twaugh@redhat.comgt;

- Use ':' instead of '.' as separator for chown.

* Fri Feb 13 2004 Elliot Lee lt;sopwith@redhat.comgt; - 3.1.8-50

- rebuilt

* Tue Dec 9 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-49

- replace at-3.1.8-SHELL-91233.patch by at-3.1.8-SHELL-111386.patch which
now executes $SHELL directly in the at shell script after all the variables
have been setup with /bin/sh (#91233) [suggested by Göran Uddeborg]
- this changelog is now in utf-8

* Fri Nov 7 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-48

- add at-3.1.8-pie.patch to build atd as pie (#108415) [Ulrich Drepper]

* Fri Oct 31 2003 Dan Walsh lt;dwalsh@redhat.comgt; - 3.1.8-47.sel

* Fri Jun 20 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-46
- add at-3.1.8-atrun.8-typo-97697.patch to fix typo in atrun.8 (#97697)
- update at.1 description of shell behaviour (#91233)

* Tue Jun 17 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-45

- make the job shell default to SHELL instead of "/bin/sh" (#91233)

* Wed Jun 4 2003 Elliot Lee lt;sopwith@redhat.comgt; - 3.1.8-44

- rebuilt

* Tue Jun 3 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-43

- Replace redundant at-3.1.7-paths.patch by at-3.1.8-man-timespec-path.patch
to fix timespec path

* Tue Jun 3 2003 Jens Petersen lt;petersen@redhat.comgt; - 3.1.8-41

- update source to at_3.1.8-11 from debian upstream
- update source url
- at-debian.patch no longer needed
- at-3.1.7-paths.patch: the patch to "at.1.in" no longer needed
- replace at-3.1.8-lexer.patch with at-3.1.8-11-lexer-parser.diff
- at-3.1.8-dst.patch no longer needed
- at-3.1.8-lsbdoc.patch no longer needed
- at-3.1.8-o_excl.patch no longer needed
- bump release number
- at-3.1.8-test.patch: move out test.pl to a separate source file
- apply at-3.1.8-test-fix.patch to it and drop patch
- at-3.1.8-shell.patch: drop (#22216,#91233)
- run "make test" after building
- add "--without check" rpmbuild option
- fix autoconf comment to point to right patch
- use _sysconfdir, _sbindir, _bindir, and _localstatedir

* Wed Jan 22 2003 Tim Powers lt;timp@redhat.comgt; 3.1.8-33

- rebuilt

* Wed Nov 27 2002 Tim Powers lt;timp@redhat.comgt; 3.1.8-32

- remove unpackaged files from the buildroot

* Thu Jul 25 2002 Bill Huang lt;bhuang@redhat.comgt;

- Fixed delaying job execution and missing starting jobs..(bug#69595)
(Thanks Bujor D Silaghi lt;bujor@cs.umd.edugt; for his patch.)

* Fri Jul 19 2002 Bill Huang lt;bhuang@redhat.comgt;

- Fixed cleaning atq and multiple atd daemon.(bug#67414)
(Thanks Bujor D Silaghi lt;bujor@cs.umd.edugt; for his patch.)

* Fri Jul 19 2002 Bill Huang lt;bhuang@redhat.comgt;

- Fixed error message output in atd.c

* Fri Jun 21 2002 Tim Powers lt;timp@redhat.comgt;

- automated rebuild

* Mon May 27 2002 Bill Huang lt;bhuang@redhat.comgt;

- Rebuild for Milan

* Thu May 23 2002 Tim Powers lt;timp@redhat.comgt;

- automated rebuild

* Fri Feb 1 2002 Bernhard Rosenkraenzer lt;bero@redhat.comgt; 3.1.8-25

- Require smtpdaemon rather than sendmail - postfix works just as well.

* Thu Jan 31 2002 Bill Nottingham lt;notting@redhat.comgt; 3.1.8-24

- rebuild in new env.

* Thu Jan 17 2002 Trond Eivind Glomsrød lt;teg@redhat.comgt; 3.1.8-23

- s/Copyright/License/

* Mon Jan 14 2002 Adrian Havill lt;havill@redhat.comgt; 3.1.8-21

- fix man page (#51253)
- fix env prop problem (#49491)
- .SEQ should not be executable (#52626)
- beefed up file creation perms against symlink exploits (O_EXCL)

* Thu Aug 2 2001 Crutcher Dunnavant lt;crutcher@redhat.comgt; 3.1.8-20

- updated patch update, still bug #46546

* Wed Jul 18 2001 Crutcher Dunnavant lt;crutcher@redhat.comgt;

- applied enrico.scholz@informatik.tu-chemnitz.de's change to the env patch to
- address bug #46546

* Mon Jun 25 2001 Crutcher Dunnavant lt;crutcher@redhat.comgt;

- changed atd.init to start at 95, stop at 5, closing #15915
- applied mailto:wp@supermedia.pl's environment patch

* Sun Jun 24 2001 Elliot Lee lt;sopwith@redhat.comgt;

- Bump release + rebuild.

* Wed Apr 4 2001 Crutcher Dunnavant lt;crutcher@redhat.comgt;

- much love to David Kilzer lt;ddkilzer@lubricants-oil.comgt;
- who nailed UTC, Leap year, DST, and some other edge cases down
- he also wrote a test harness in perl
- bug #28448

* Fri Feb 2 2001 Trond Eivind Glomsrød lt;teg@redhat.comgt;

- i18nize initscript

* Tue Dec 12 2000 Bill Nottingham lt;notting@redhat.comgt;

- fix documentation of which shell commands will be run with (#22216)

* Wed Aug 23 2000 Crutcher Dunnavant lt;crutcher@redhat.comgt;

- Well, we will likely never really close the UTC issues,
- because of 1) fractional timezones, and 2) daylight savigns time.
- but there is a slight tweak to the handling of dst in the UTC patch.

* Wed Aug 23 2000 Crutcher Dunnavant lt;crutcher@redhat.comgt;

- fixed bug #15685
- which had at miscaluclating UTC times.

* Sat Jul 15 2000 Bill Nottingham lt;notting@redhat.comgt;

- move initscript back

* Wed Jul 12 2000 Prospector lt;bugzilla@redhat.comgt;

- automatic rebuild

* Thu Jul 6 2000 Bill Nottingham lt;notting@redhat.comgt;

- prereq /etc/init.d

* Sat Jul 1 2000 Nalin Dahyabhai lt;nalin@redhat.comgt;

- fix syntax error in init script

* Tue Jun 27 2000 Preston Brown lt;pbrown@redhat.comgt;

- don't prereq, only require initscripts

* Mon Jun 26 2000 Preston Brown lt;pbrown@redhat.comgt;

- move init script
- add condrestart directive
- fix post/preun/postun scripts
- prereq initscripts gt;= 5.20

* Sat Jun 17 2000 Bill Nottingham lt;notting@redhat.comgt;

- fix verify of /var/spool/at/.SEQ (#12262)

* Mon Jun 12 2000 Nalin Dahyabhai lt;nalin@redhat.comgt;

- fix status checking and syntax error in init script

* Fri Jun 9 2000 Bill Nottingham lt;notting@redhat.comgt;

- fix for long usernames (#11321)
- add some bugfixes from debian

* Mon May 8 2000 Bernhard Rosenkraenzer lt;bero@redhat.comgt;

- 3.1.8

* Wed Mar 1 2000 Bill Nottingham lt;notting@redhat.comgt;

- fix a couple of more typos, null-terminate some strings

* Thu Feb 10 2000 Bill Nottingham lt;notting@redhat.comgt;

- fix many-years-old typo in atd.c

* Thu Feb 3 2000 Bill Nottingham lt;notting@redhat.comgt;

- handle compressed man pages

* Mon Aug 16 1999 Bill Nottingham lt;notting@redhat.comgt;

- initscript munging, build as non-root user

* Sun Jun 13 1999 Jeff Johnson lt;jbj@redhat.comgt;

- correct perms for /var/spool/at after defattr.

* Mon May 24 1999 Jeff Johnson lt;jbj@redhat.comgt;

- reset SIGCHLD before exec (#3016).

* Sun Mar 21 1999 Cristian Gafton lt;gafton@redhat.comgt;

- auto rebuild in the new build environment (release

* Thu Mar 18 1999 Cristian Gafton lt;gafton@redhat.comgt;

- fix handling the 12:00 time

* Wed Jan 13 1999 Bill Nottingham lt;notting@redhat.comgt;

- configure fix for arm

* Wed Jan 6 1999 Cristian Gafton lt;gafton@redhat.comgt;

- build for glibc 2.1

* Tue May 5 1998 Prospector System lt;bugs@redhat.comgt;

- translations modified for de, fr, tr

* Wed Apr 22 1998 Michael K. Johnson lt;johnsonm@redhat.comgt;

- enhanced initscript

* Sun Nov 9 1997 Michael K. Johnson lt;johnsonm@redhat.comgt;

- learned to spell

* Wed Oct 22 1997 Michael K. Johnson lt;johnsonm@redhat.comgt;

- updated to at version 3.1.7
- updated lock and sequence file handling with %ghost
- Use chkconfig and atd, now conflicts with old crontabs packages

* Thu Jun 19 1997 Erik Troan lt;ewt@redhat.comgt;

- built against glibc


---------------------------------------------------------------------
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/3/

dc042cb6ea40a3a671135ca977bcd6a9 SRPMS/at-3.1.8-70_FC3.src.rpm
eba9c359938891606001028745093b80 x86_64/at-3.1.8-70_FC3.x86_64.rpm
bd2db5f5c94a93b19ae85753fa262475 x86_64/debug/at-debuginfo-3.1.8-70_FC3.x86_64.rpm
13a671f00e4b891aa5a8ec8cb7269d65 i386/at-3.1.8-70_FC3.i386.rpm
3424821c918ca1fa103d7109669890bc i386/debug/at-debuginfo-3.1.8-70_FC3.i386.rpm

This update can also be installed with the Update Agent; you can launch the Update Agent with the 'up2date' command.