----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Ubuntu update for sudo

SECUNIA ADVISORY ID:
SA33737

VERIFY ADVISORY:
http://secunia.com/advisories/33737/

DESCRIPTION:
Ubuntu has issued an update for sudo. This fixes a security issue,
which can be exploited by malicious, local users to gain escalated
privileges.

For more information:
SA33753

SOLUTION:
Apply updated packages.

-- Ubuntu 8.04 LTS --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4.diff.gz
Size/MD5: 28195 a3ef076ed66f2a1d1ab0ebd5cafefaa4
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4.dsc
Size/MD5: 739 91a65bd5beb7e2f7206d081455238fdb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10.orig.tar.gz
Size/MD5: 579302 16db2a1213159a1fac8239eab58108f5

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4_amd64.deb
Size/MD5: 188062 246612b4d29a8fd216cd1f5619b6f92f
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubuntu3.4_amd64.deb
Size/MD5: 199606 b5b948d0f3f12791e97838ea1b952ce2

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4_i386.deb
Size/MD5: 176230 bc3547ffcc1a8060cf96f0d096a44c3c
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubuntu3.4_i386.deb
Size/MD5: 187056 ce23d03b7e8f10f714a9c559ce741458

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4_lpia.deb
Size/MD5: 177396 57ef14f30094341da593dd3683f3f7e8
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubuntu3.4_lpia.deb
Size/MD5: 188098 d4c576aac4c27e7ab3646c5ac5a323e3

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4_powerpc.deb
Size/MD5: 188226 a4739b543098b729cfb63ce20fc37dae
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubuntu3.4_powerpc.deb
Size/MD5: 202064 226b1789a16fedf35241f16e74e2f252

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p10-1ubuntu3.4_sparc.deb
Size/MD5: 182204 22004aca9eddcd46a4bda1d066b97ac1
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p10-1ubuntu3.4_sparc.deb
Size/MD5: 193236 96f59c47bbc14586b40c440995467ea4

-- Ubuntu 8.10 --

Source archives:

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1.diff.gz
Size/MD5: 25366 af7e507328494298721aad11d13488da
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1.dsc
Size/MD5: 1135 e5192f02cdc0284d832460ac7ae4b955
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17.orig.tar.gz
Size/MD5: 593534 60daf18f28e2c1eb7641c4408e244110

amd64 architecture (Athlon64, Opteron, EM64T Xeon):

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1_amd64.deb
Size/MD5: 191138 ad2dae17ccbc9673d8e53546afee3d14
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubuntu2.1_amd64.deb
Size/MD5: 202074 ab01d71c8e86e83903dc72fbebba4c90

i386 architecture (x86 compatible Intel/AMD):

http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1_i386.deb
Size/MD5: 179122 ee80fb039bc6d493050a876593bdf8e0
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubuntu2.1_i386.deb
Size/MD5: 188614 1158e7471fe07070c9900ebcb827af98

lpia architecture (Low Power Intel Architecture):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1_lpia.deb
Size/MD5: 180306 f0ec9a79d4728047c6d32f3126ae06af
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubuntu2.1_lpia.deb
Size/MD5: 189392 830c281c450cceed63fdb46093a8e082

powerpc architecture (Apple Macintosh G3/G4/G5):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1_powerpc.deb
Size/MD5: 188548 0de77be3253ffe27353ca481c638696c
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubuntu2.1_powerpc.deb
Size/MD5: 200986 04c80b6cf9764550b81d19ada01df988

sparc architecture (Sun SPARC/UltraSPARC):

http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.6.9p17-1ubuntu2.1_sparc.deb
Size/MD5: 183994 7ed518be234fa37482f3c4e86c49ae3f
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.6.9p17-1ubuntu2.1_sparc.deb
Size/MD5: 193662 f9616eade202d044a2a62c8ed2b043d8

ORIGINAL ADVISORY:
http://www.ubuntu.com/usn/usn-722-1

OTHER REFERENCES:
SA33753:
http://secunia.com/advisories/33753/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------