[Fink-announce] FINK-2005-06-23 Security Announcement - sudo

[David H. <dm...@us...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ID: FINK-2005-06-23
Reported: 2005-06-23
Updated:  2005-06-23

Package:  sudo
Affected: <= 1.6.8p8

Maintainer: Darian Lanx
Tree(s): 10.4-transitional/unstable
Mac OS X version: 10.4
Fix: upstream

Updated by: maintainer (dmalloc <at> users.sourceforge.net)

Description: race condition in Sudo's command pathname handling

References: MISC
Ref-URL: http://www.sudo.ws/sudo/alerts/path_race.html
References: GENTOO
Ref-URL:http://archives.neohapsis.com/archives/fulldisclosure/2005-06/0308.html

To verify the authenticity please visit
http://fink.sourceforge.net/doc/security/notification.php?phpLang=en#who
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)

iD8DBQFCuwOlPMoaMn4kKR4RAlgbAJ9FyEWW4JzcyrbhFLMpAQU3UwDHbwCeJmaX
TCJY0N/wPlh+BJojKLrApWs=
=VAQb
-----END PGP SIGNATURE-----