Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

Slackware: 2005-251-01 Critical: Kcheckpass Local Access Flaw

slackware
Calendar Grey September 8, 2005
Dist Slackware Esm H88
Notice for Slackware kdebase resolves kcheckpass lockfile vulnerability enabling local root escalation. Implement the fix immediately!
New kdebase packages are available for Slackware 10.0, 10.1, and -current to fix a security issue with the kcheckpass program

Summary

Here are the details from the Slackware 10.1 ChangeLog: patches/packages/kdebase-3.3.2-i486-2.tgz: Patched a security bug in kcheckpass that could allow a local user to gain root privileges. For more information, see: https://kde.org/info/security/advisory-20050905-1.txt https://www.cve.org/CVERecord?id=CAN-2005-2494 (* Security fix *) Where to find the new package: Updated package for Slackware 10.0: Updated package for Slackware 10.1: Updated package for Slackware -current:

Where Find New Packages

MD5 Signatures

Slackware 10.0 package: 89cbad3536bbfba273b2ae77a097ce89 kdebase-3.2.3-i486-3.tgz
Slackware 10.1 package: 6d2d8c96dc1f5b209b5eb35425ae7952 kdebase-3.3.2-i486-2.tgz
Slackware -current package: 8b7066a01eb25a8b846d2ac9a5de85e2 kdebase-3.4.2-i486-2.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg kdebase-3.3.2-i486-2.tgz

Related News

Your message here