<?xml version="1.0" encoding="UTF-8"?>
<!--PATCHINFO id="c1757606ae86a07a67461e4c313fea11"!-->
<update status="stable" from="maint-coord@suse.de" type="security" version="2083">
  <id>dbg111-sudo</id>
  <title>sudo: security update</title>
  <release>openSUSE 11.1</release>
  <issued date="1267442706"/>
  <references>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=582555" id="582555" title="bug number 582555" type="bugzilla"/>
    <reference href="https://bugzilla.novell.com/show_bug.cgi?id=582556" id="582556" title="bug number 582556" type="bugzilla"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0426" id="CVE-2010-0426" title="CVE-2010-0426" type="cve"/>
    <reference href="http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0427" id="CVE-2010-0427" title="CVE-2010-0427" type="cve"/>
  </references>
  <description>This update fixes two security issues:
- CVE-2010-0427:CVSS v2 Base Score: 6.6 Sudo failed to
  properly reset group permissions, when 'runas_default'
  option was used. If a local, unprivileged user was
  authorized by sudoers file to perform their sudo commands
  under default user account, it could lead to privilege
  escalation  CVE-2010-0426:CVSS v2 Base Score: 6.6 A
  privilege escalation flaw was found in the way sudo used
  to check file paths for pseudocommands. If local,
  unprivileged user was authorized by sudoers file to edit
  one or more files, it could lead to execution of
  arbitrary code, with the privileges of privileged system
  user (root).
</description>
  <pkglist>
    <collection>
        <package name="sudo-debuginfo" arch="i586" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debuginfo-1.6.9p17-10.37.1.i586.rpm</filename>
        </package>
        <package name="sudo-debuginfo" arch="ppc" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debuginfo-1.6.9p17-10.37.1.ppc.rpm</filename>
        </package>
        <package name="sudo-debuginfo" arch="x86_64" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debuginfo-1.6.9p17-10.37.1.x86_64.rpm</filename>
        </package>
        <package name="sudo-debugsource" arch="i586" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debugsource-1.6.9p17-10.37.1.i586.rpm</filename>
        </package>
        <package name="sudo-debugsource" arch="ppc" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debugsource-1.6.9p17-10.37.1.ppc.rpm</filename>
        </package>
        <package name="sudo-debugsource" arch="x86_64" version="1.6.9p17" release="10.37.1">
          <filename>sudo-debugsource-1.6.9p17-10.37.1.x86_64.rpm</filename>
        </package>
    </collection>
  </pkglist>
</update>
