Strange updates today

[Mark Fraser]

On Saturday 15 November 2008 13:57:37 Dotan Cohen wrote:
> 2008/11/15  <info at alvin.be>:
> >> I run Kubuntu 8.04 on my Dell laptop. Today when I went to upgrade via
> >> apt-get I noticed that the "passwd" package is being updated. That
> >> seems to me rather unusual, as it is a ver ystable package and has
> >> been for as long as I remember. Also, it is critical to system
> >> security. Where can I find more information about this update?
> >
> > This will tell you what you want to know:
> >
> > $ aptitude changelog passwd
>
> Thanks, that is really good to know.

Just done a rootkit check with rkhunter and it's found a few problems with 
checks on certain files in /bin and /sbin:

[15:26:53] /bin/login                                        [ Warning ]
[15:26:54] /bin/lsmod                                        [ Warning ]
[15:26:56] /bin/su                                           [ Warning ]
[15:27:02] /usr/bin/lastlog                                  [ Warning ]
[15:27:04] /usr/bin/newgrp                                   [ Warning ]
[15:27:05] /usr/bin/passwd                                   [ Warning ]
[15:27:12] /sbin/depmod                                      [ Warning ]
[15:27:14] /sbin/insmod                                      [ Warning ]
[15:27:14] /sbin/lsmod                                       [ Warning ]
[15:27:15] /sbin/modinfo                                     [ Warning ]
[15:27:15] /sbin/modprobe                                    [ Warning ]
[15:27:16] /sbin/rmmod                                       [ Warning ]
[15:27:19] /usr/sbin/groupadd                                [ Warning ]
[15:27:19] /usr/sbin/groupdel                                [ Warning ]
[15:27:19] /usr/sbin/groupmod                                [ Warning ]
[15:27:20] /usr/sbin/grpck                                   [ Warning ]
[15:27:21] /usr/sbin/nologin                                 [ Warning ]
[15:27:22] /usr/sbin/pwck                                    [ Warning ]
[15:27:22] /usr/sbin/useradd                                 [ Warning ]
[15:27:23] /usr/sbin/userdel                                 [ Warning ]
[15:27:23] /usr/sbin/usermod                                 [ Warning ]
[15:27:24] /usr/sbin/vipw                                    [ Warning ]

Saying that the hash has changed. Am I right in thinking these are due to the 
update of the above packages?


-- 
Registered Linux User #466407 http://counter.li.org