Sebastian Krahmer from SuSE found a vulnerability in sudo which could
easily lead into a local root exploit.
This problem has been fixed in upstream version 1.6.4 as well as in
version 1.6.2p2-2.1 for the stable release of Debian GNU/Linux.
We recommend that you upgrade your sudo packages immediately.
will fetch the file for you
dpkg -i file.deb
will install the referenced file.
If you are using the apt-get package manager, use the line for
sources.list as given below:
will update the internal database
will install corrected packages
You may use an automated update by adding the resources from the
footer to the proper configuration.
Debian GNU/Linux 2.2 alias potato
MD5 checksum: b05ab1661adadf4b709383290e26a737
MD5 checksum: fc5fbac82937b905f6dff443c5e66def
MD5 checksum: dd5944c880fd5cc56bc0f0199e92d2b4
MD5 checksum: c8c85190180fd2bfad1c773543724a54
MD5 checksum: 3c6dedbe1d5ae3577ff8e2098266e3fa
Intel ia32 architecture:
MD5 checksum: 793c815263a64e63108628ed31537dfe
Motorola 680x0 architecture:
MD5 checksum: ccb48bfdc802fa3bd42aa6c3651b8519
MD5 checksum: 339656a46a91c9f7133cdc2f8064c672
Sun Sparc architecture:
MD5 checksum: 04e085d331642e8d63fc95acfa85ae76
These files will probably be moved into the stable distribution on
its next revision.