[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[debian-users:27234] [SECURITY] [DSA 031-2] New sudo packages for powerpc available (from debian-security-announce@lists.debian.org)



debian-security-announce@lists.debian.orgに、
[DSA 031-1](sudoのバッファオーバーフロー)の補足情報が流れました。
これは、[DSA 031-1]のアナウンス時点では用意されていなかった、
PowerPC用パッケージに関する情報です。

修正済みバージョンは1.6.2p2-1potato1です。このバージョンへの
アップデートをおすすめします。

以下、アナウンスの引用です。

From: Martin Schulze <joey@xxxxxxxxxxxxxxxxxxxxxxxxxxx>
Subject: [SECURITY] [DSA 031-2] New sudo packages for powerpc available
Date: Tue, 6 Mar 2001 03:15:05 +0100
> - ----------------------------------------------------------------------------
> Debian Security Advisory DSA-031-2                       security@debian.org
> http://www.debian.org/security/                               Martin Schulze
> March 6, 2001
> - ----------------------------------------------------------------------------
> 
> Package        : sudo
> Vulnerability  : buffer overflow
> Debian-specific: no
> 
> Todd Miller announced a new version of sudo which corrects a buffer
> overflow that could potentially be used to gain root privilages on the
> local system.  This bugfix has been backported to the version which
> was used in Debian GNU/Linux 2.2.
> 
> The most recent advisory covering sudo missed one architecture that
> was released with 2.2.  Therefore this advisory is only an addition to
> DSA 031-1 and only adds the relevant package for the powerpc
> architecture.
> 
> We recommend you upgrade your sudo packages for powerpc immediately.
> 
> wget url
> 	will fetch the file for you
> dpkg -i file.deb
>         will install the referenced file.
> 
> You may use an automated update by adding the resources from the
> footer to the proper configuration.
> 
(中略)
> - ----------------------------------------------------------------------------
> For apt-get: deb http://security.debian.org/ stable/updates main
> For dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main
> Mailing list: debian-security-announce@lists.debian.org
> Package info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>
(略)

以上です。
-- 
喜瀬“冬猫”浩@南国沖縄