Todd Miller Sudo Runas Group Local Privilege Escalation Vulnerability

Todd Miller Sudo Runas Group Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references for more information.

Ubuntu Ubuntu Linux 9.10 sparc

Ubuntu sudo_1.7.0-1ubuntu2.5_sparc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.5_sparc.d eb

Ubuntu sudo-ldap_1.7.0-1ubuntu2.5_sparc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 5_sparc.deb

Slackware Linux x86_64 -current

Slackware sudo-1.7.4p4-x86_64-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ ap/sudo-1.7.4p4-x86_64-1.txz

Slackware sudo-1.7.4p4-x86_64-2.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-current/slackware64/ ap/sudo-1.7.4p4-x86_64-2.txz

Slackware Linux 12.0

Slackware sudo-1.7.4p4-i486-2_slack12.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ sudo-1.7.4p4-i486-2_slack12.0.tgz

Slackware sudo-1.7.4p4-i486-1_slack12.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.0/patches/packages/ sudo-1.7.4p4-i486-1_slack12.0.tgz

MandrakeSoft Linux Mandrake 2009.1 x86_64

Mandriva sudo-1.7.0-1.6mdv2009.1.x86_64.rpm
http://www.mandriva.com/en/download/

Slackware Linux -current

Slackware sudo-1.7.4p4-i486-2.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/s udo-1.7.4p4-i486-2.txz

Slackware sudo-1.7.4p4-i486-1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-current/slackware/ap/s udo-1.7.4p4-i486-1.txz

Slackware Linux 12.2

Slackware sudo-1.7.4p4-i486-2_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ sudo-1.7.4p4-i486-2_slack12.2.tgz

Slackware sudo-1.7.4p4-i486-1_slack12.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ sudo-1.7.4p4-i486-1_slack12.2.tgz

Ubuntu Ubuntu Linux 9.10 powerpc

Ubuntu sudo_1.7.0-1ubuntu2.5_powerpc.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.5_powerpc .deb

Ubuntu sudo-ldap_1.7.0-1ubuntu2.5_powerpc.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 5_powerpc.deb

Slackware Linux 13.1 x86_64

Slackware sudo-1.7.4p4-x86_64-2_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/sudo-1.7.4p4-x86_64-2_slack13.1.txz

Slackware sudo-1.7.4p4-x86_64-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.1/patches/package s/sudo-1.7.4p4-x86_64-1_slack13.1.txz

Ubuntu Ubuntu Linux 9.10 lpia

Ubuntu sudo_1.7.0-1ubuntu2.5_lpia.deb
http://ports.ubuntu.com/pool/main/s/sudo/sudo_1.7.0-1ubuntu2.5_lpia.de b

Ubuntu sudo-ldap_1.7.0-1ubuntu2.5_lpia.deb
http://ports.ubuntu.com/pool/universe/s/sudo/sudo-ldap_1.7.0-1ubuntu2. 5_lpia.deb

MandrakeSoft Linux Mandrake 2010.1 x86_64

Mandriva sudo-1.7.2-0.p7.1.1mdv2010.1.x86_64.rpm
http://www.mandriva.com/en/download/

Slackware Linux 13.1

Slackware sudo-1.7.4p4-i486-1_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ sudo-1.7.4p4-i486-1_slack13.1.txz

Slackware sudo-1.7.4p4-i486-2_slack13.1.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.1/patches/packages/ sudo-1.7.4p4-i486-2_slack13.1.txz

MandrakeSoft Linux Mandrake 2010.0

Mandriva sudo-1.7.2-0.p1.1.4mdv2010.0.i586.rpm
http://www.mandriva.com/en/download/

Slackware Linux 13.0 x86_64

Slackware sudo-1.7.4p4-x86_64-2_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/sudo-1.7.4p4-x86_64-2_slack13.0.txz

Slackware sudo-1.7.4p4-x86_64-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/sudo-1.7.4p4-x86_64-1_slack13.0.txz

MandrakeSoft Linux Mandrake 2010.0 x86_64

Mandriva sudo-1.7.2-0.p1.1.4mdv2010.0.x86_64.rpm
http://www.mandriva.com/en/download/

Slackware Linux 12.1

Slackware sudo-1.7.4p4-i486-2_slack12.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ sudo-1.7.4p4-i486-2_slack12.1.tgz

Slackware sudo-1.7.4p4-i486-1_slack12.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-12.1/patches/packages/ sudo-1.7.4p4-i486-1_slack12.1.tgz

MandrakeSoft Linux Mandrake 2010.1

Mandriva sudo-1.7.2-0.p7.1.1mdv2010.1.i586.rpm
http://www.mandriva.com/en/download/

Ubuntu Ubuntu Linux 9.10 i386

Ubuntu sudo_1.7.0-1ubuntu2.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.7.0-1ubuntu2 .5_i386.deb

Ubuntu sudo-ldap_1.7.0-1ubuntu2.5_i386.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.7.0 -1ubuntu2.5_i386.deb

Slackware Linux 13.0

Slackware sudo-1.7.4p4-i486-1_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ sudo-1.7.4p4-i486-1_slack13.0.txz

Slackware sudo-1.7.4p4-i486-2_slack13.0.txz
ftp://ftp.slackware.com/pub/slackware/slackware-13.0/patches/packages/ sudo-1.7.4p4-i486-2_slack13.0.txz

Ubuntu Ubuntu Linux 9.10 amd64

Ubuntu sudo-ldap_1.7.0-1ubuntu2.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/universe/s/sudo/sudo-ldap_1.7.0 -1ubuntu2.5_amd64.deb

Ubuntu sudo_1.7.0-1ubuntu2.5_amd64.deb
http://security.ubuntu.com/ubuntu/pool/main/s/sudo/sudo_1.7.0-1ubuntu2 .5_amd64.deb

Slackware Linux 11.0

Slackware sudo-1.7.4p4-i486-2_slack11.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ sudo-1.7.4p4-i486-2_slack11.0.tgz

Slackware sudo-1.7.4p4-i486-1_slack11.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-11.0/patches/packages/ sudo-1.7.4p4-i486-1_slack11.0.tgz

MandrakeSoft Linux Mandrake 2009.1

Mandriva sudo-1.7.0-1.6mdv2009.1.i586.rpm
http://www.mandriva.com/en/download/

Slackware Linux 10.0

Slackware sudo-1.7.4p4-i486-2_slack10.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ sudo-1.7.4p4-i486-2_slack10.0.tgz

Slackware sudo-1.7.4p4-i486-1_slack10.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.0/patches/packages/ sudo-1.7.4p4-i486-1_slack10.0.tgz

Slackware Linux 10.1

Slackware sudo-1.7.4p4-i486-2_slack10.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ sudo-1.7.4p4-i486-2_slack10.1.tgz

Slackware sudo-1.7.4p4-i486-1_slack10.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.1/patches/packages/ sudo-1.7.4p4-i486-1_slack10.1.tgz

Slackware Linux 10.2

Slackware sudo-1.7.4p4-i486-1_slack10.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ sudo-1.7.4p4-i486-1_slack10.2.tgz

Slackware sudo-1.7.4p4-i486-2_slack10.2.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-10.2/patches/packages/ sudo-1.7.4p4-i486-2_slack10.2.tgz

Slackware Linux 8.1

Slackware sudo-1.7.4p4-i386-2_slack8.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/s udo-1.7.4p4-i386-2_slack8.1.tgz

Slackware sudo-1.7.4p4-i386-1_slack8.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-8.1/patches/packages/s udo-1.7.4p4-i386-1_slack8.1.tgz

Slackware Linux 9.0

Slackware sudo-1.7.4p4-i386-1_slack9.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/s udo-1.7.4p4-i386-1_slack9.0.tgz

Slackware sudo-1.7.4p4-i386-2_slack9.0.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.0/patches/packages/s udo-1.7.4p4-i386-2_slack9.0.tgz

Slackware Linux 9.1

Slackware sudo-1.7.4p4-i486-1_slack9.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/s udo-1.7.4p4-i486-1_slack9.1.tgz

Slackware sudo-1.7.4p4-i486-2_slack9.1.tgz
ftp://ftp.slackware.com/pub/slackware/slackware-9.1/patches/packages/s udo-1.7.4p4-i486-2_slack9.1.tgz