Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

Slackware: 2006-045-08 Critical: Sudo Root Access Issue Detected

slackware
Calendar Grey February 15, 2006
Dist Slackware Esm H88
Update sudo software components on Slackware 8.1 or later to mitigate a severe security vulnerability that enables unauthorized root access.
New sudo packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, and -current to fix a security issue

Summary

Here are the details from the Slackware 10.2 ChangeLog: patches/packages/sudo-1.6.8p12-i486-1.tgz: Upgraded to sudo-1.6.8p12. This fixes an issue where a user able to run a Python script through sudo may be able to gain root access. IMHO, running any kind of scripting language from sudo is still not safe... For more information, see: https://www.cve.org/CVERecord?id=CVE-2006-0151 (* Security fix *)

Where Find New Packages

Updated package for Slackware 8.1:
Updated package for Slackware 9.0:
Updated package for Slackware 9.1:
Updated package for Slackware 10.0:
Updated package for Slackware 10.1:
Updated package for Slackware 10.2:
Updated package for Slackware -current:

MD5 Signatures

Slackware 8.1 package: 500a0ee571555ee770a2327a3a27a933 sudo-1.6.8p12-i386-1.tgz
Slackware 9.0 package: 02fe736a1b2e48e9bba9f8162b41b147 sudo-1.6.8p12-i386-1.tgz
Slackware 9.1 package: 79837d920b4d5c3007223f51dda2fe95 sudo-1.6.8p12-i486-1.tgz
Slackware 10.0 package: 2be4cf67584af9063f94740c18c23aaa sudo-1.6.8p12-i486-1.tgz
Slackware 10.1 package: 4cf1682f1f6459ffcdae3f8f213fa524 sudo-1.6.8p12-i486-1.tgz
Slackware 10.2 package: 38004123c469976ada1eb39152c4deb7 sudo-1.6.8p12-i486-1.tgz
Slackware -current package: b80129cc34db0742cffc365cdfbeeadf sudo-1.6.8p12-i486-1.tgz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg sudo-1.6.8p12-i486-1.tgz

Related News

Your message here