Comment 3 for bug 618795

Revision history for this message
Aaron Levy (aaronlevy) wrote :

The above issue is unrelated and has been fixed in 612. update.py was using sudo() rather than local() and this caused it to try and make an ssh connection.

The original issue is due to hudson closing a potential security hole (CLI commands didn't need user credentials).

http://hudson-labs.org/changelog

What's new in 1.371 (2010/08/09)
A security hole in CLI command implementations enable unauthorized users from executing commands. (SECURITY-5)