Slackware-12.1 ChangeLog (2013-03-07)
Thu Mar 7 00:16:35 UTC 2013
Packages
Upgraded
- patches/packages/sudo-1.7.10p7-i486-1_slack12.1.tgz
This update fixes security issues that could allow a user to run commands
without authenticating after the password timeout has already expired.
Note that the vulnerability did not permit a user to run commands other
than those allowed by the sudoers policy.
For more information, see:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1775
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-1776
(* Security fix *)