---------------------------------------------------------------------- Want to work within IT-Security? Secunia is expanding its team of highly skilled security experts. We will help with relocation and obtaining a work permit. Currently the following type of positions are available: http://secunia.com/quality_assurance_analyst/ http://secunia.com/web_application_security_specialist/ http://secunia.com/hardcore_disassembler_and_reverse_engineer/ ---------------------------------------------------------------------- TITLE: Mandriva update for sudo SECUNIA ADVISORY ID: SA21692 VERIFY ADVISORY: http://secunia.com/advisories/21692/ CRITICAL: Less critical IMPACT: Privilege escalation WHERE: Local system OPERATING SYSTEM: Mandriva Linux 2006 http://secunia.com/product/9020/ DESCRIPTION: Mandriva has issued an update for sudo. This fixes some vulnerabilities, which can be exploited by malicious, local users to gain escalated privileges. For more information: SA17534 SA18358 SOLUTION: Apply updated packages. Mandrivalinux 2006 859526089cecbc00c11b0c76509f97b1 2006.0/RPMS/sudo-1.6.8p8-2.3.20060mdk.i586.rpm 7dce7457a74d625018aee6690bcc35d7 2006.0/SRPMS/sudo-1.6.8p8-2.3.20060mdk.src.rpm Mandrivalinux 2006/X86_64 8ab6e95323473f6f1f72c255aa4453ae x86_64/2006.0/RPMS/sudo-1.6.8p8-2.3.20060mdk.x86_64.rpm 7dce7457a74d625018aee6690bcc35d7 x86_64/2006.0/SRPMS/sudo-1.6.8p8-2.3.20060mdk.src.rpm ORIGINAL ADVISORY: http://www.mandriva.com/security/advisories?name=MDKSA-2006:159 OTHER REFERENCES: SA17534: http://secunia.com/advisories/17534/ SA18358: http://secunia.com/advisories/18358/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------