Linux Today: Linux News On Internet Time.

More on LinuxToday

Debian Security Advisory: sudo

Apr 26, 2002, 01:10 (0 Talkback[s])

WEBINAR: On-demand Event

Replace Oracle with the NoSQL Engagement Database: Why and how leading companies are making the switch REGISTER >

- ------------------------------------------------------------------------
Debian Security Advisory DSA-128-1                                  Wichert Akkerman
April 26, 2002
- ------------------------------------------------------------------------

Package        : sudo
Problem type   : buffer overflow
Debian-specific: no

fc found a buffer overflow in the variable expansion code
used by sudo for its prompt. Since sudo is necessarily installed suid
root a local user can use this to gain root access.

This has been fixed in version 1.6.2-2.2 and we recommend that you upgrade
your sudo package immediately.

wget url
        will fetch the file for you
dpkg -i file.deb
        will install the referenced file.

Debian GNU/Linux 2.2 alias potato
- ---------------------------------

  Potato was released for alpha, arm, i386, m68k, powerpc and sparc.

  Source archives:
      MD5 checksum: 958560c409b43bd13463b3d380fc534a
      MD5 checksum: 7323f0f3614513156120ccc4772524f8
      MD5 checksum: dd5944c880fd5cc56bc0f0199e92d2b4

  Alpha architecture:
      MD5 checksum: 66cb0d4f730560fddba65e44dd78c34d

  ARM architecture:
      MD5 checksum: f74bae46ebd07bd8f430261153d13f90

  Intel IA-32 architecture:
      MD5 checksum: 9ac9b91818dd7b2f2888aa39aac0da98

  Motorola 680x0 architecture:
      MD5 checksum: 46f6d595363d23c96701cd303511e1a5

  PowerPC architecture:
      MD5 checksum: 66c23d2544e9a8f19c57c919a4a751c9

  Sun Sparc architecture:
      MD5 checksum: 9654ecac0230abe0f28524469fb5887e

  These packages will be moved into the stable distribution on its next

- -- 
- ----------------------------------------------------------------------------
apt-get: deb stable/updates main
dpkg-ftp: dists/stable/updates/main
Mailing list:

To UNSUBSCRIBE, email to
with a subject of "unsubscribe". Trouble? Contact