[SUSE-Announcements] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for SUSE Linux Enterprise'

[Notification of New SUSE Fixlet Messages]

Fixlet Site - 'Patches for SUSE Linux Enterprise'
Current Version: 310	Published: Thu, 11 Mar 2010 19:32:48  GMT

New Fixlets:
============

***************************************************************
Title: PATCH-B10031001 - Security update for sudo - SLES10 SP3
Severity: <Unspecified>
Fixlet ID: 1003100101
Fixlet Link: http://download.novell.com/Download?buildid=v1qJC0lAGHI~

Fixlet Description: This update fixes the following security issue:     CVE-2010-0426:CVSS v2 Base Score: 6.6 A privilege escalation flaw was found in the way     sudo used to check file paths for pseudocommands.     If local, unprivileged user was authorized by sudoers     file to edit one or more files, it could lead to     execution of arbitrary code, with the privileges     of privileged system user (root). Everyone should update. Please see patch page for more detailed information.

***************************************************************
Title: PATCH-B10031001 - Security update for sudo - SLED10 SP3
Severity: <Unspecified>
Fixlet ID: 1003100103
Fixlet Link: http://download.novell.com/Download?buildid=JWbNakcFXa0~

Fixlet Description: This update fixes the following security issue:     CVE-2010-0426:CVSS v2 Base Score: 6.6 A privilege escalation flaw was found in the way     sudo used to check file paths for pseudocommands.     If local, unprivileged user was authorized by sudoers     file to edit one or more files, it could lead to     execution of arbitrary code, with the privileges     of privileged system user (root). Everyone should update. Please see patch page for more detailed information.