Alerts This Week
Warning Icon 1 677
Alerts This Week
Warning Icon 1 677

Slackware 14.0-15.0 SSA:2023-018-01 Critical: Sudo Access Issue

slackware
Calendar Grey January 19, 2023
Dist Slackware Esm H88
Latest security updates released for Slackware to fix issues with file access permissions. Users advised to upgrade.
New sudo packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix a security issue

Summary

Here are the details from the Slackware 15.0 ChangeLog: patches/packages/sudo-1.9.12p2-i586-1_slack15.0.txz: Upgraded. This update fixes a flaw in sudo's -e option (aka sudoedit) that could allow a malicious user with sudoedit privileges to edit arbitrary files. For more information, see: https://www.cve.org/CVERecord?id=CVE-2023-22809 (* Security fix *)

Where Find New Packages

Thanks to the friendly folks at the OSU Open Source Lab (https://osuosl.org/) for donating FTP and rsync hosting to the Slackware project! :-)
Also see the "Get Slack" section on http://www.slackware.com/ for additional mirror sites near you.
Updated package for Slackware 14.0:
Updated package for Slackware x86_64 14.0:
Updated package for Slackware 14.1:
Updated package for Slackware x86_64 14.1:
Updated package for Slackware 14.2:
Updated package for Slackware x86_64 14.2:
Updated package for Slackware 15.0:
Updated package for Slackware x86_64 15.0:
Updated package for Slackware -current:
Updated package for Slackware x86_64 -current:

MD5 Signatures

Slackware 14.0 package: 4d4b24f050b89400fce402c655422e74 sudo-1.9.12p2-i486-1_slack14.0.txz
Slackware x86_64 14.0 package: b34d668a8a66a846a3aca4fec74619ba sudo-1.9.12p2-x86_64-1_slack14.0.txz
Slackware 14.1 package: 3cebfe330aab0609ccdde79ebd33f5aa sudo-1.9.12p2-i486-1_slack14.1.txz
Slackware x86_64 14.1 package: 598307f0579e39ff6f8a667b258b8f90 sudo-1.9.12p2-x86_64-1_slack14.1.txz
Slackware 14.2 package: 4c0a735368c82198ea5773a6cd59cbd4 sudo-1.9.12p2-i586-1_slack14.2.txz
Slackware x86_64 14.2 package: 7557e0b8e0ddc19d03dd45bbed2fbbd0 sudo-1.9.12p2-x86_64-1_slack14.2.txz
Slackware 15.0 package: 98ce4237ac13514fbbf14d4c409ea038 sudo-1.9.12p2-i586-1_slack15.0.txz
Slackware x86_64 15.0 package: 04ca46323bf4dd7f1e730bf3a08e31d0 sudo-1.9.12p2-x86_64-1_slack15.0.txz
Slackware -current package: b4fe37ea6c0bbe5c6a1790bbda9898b4 ap/sudo-1.9.12p2-i586-1.txz
Slackware x86_64 -current package: 50de6695ee8c294c8080c8c7114aae48 ap/sudo-1.9.12p2-x86_64-1.txz

Severity
critical
Lowest
Low
Medium
High
Critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Installation Instructions

Installation instructions: Upgrade the package as root: # upgradepkg sudo-1.9.12p2-i586-1_slack15.0.txz

Related News

Your message here