Skip to content
OpenAdvisories
Unscored DLA-160-1 2 CVEs

sudo - security update

Published Feb 27, 2015 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 sudo 1.7.4p4-2.squeeze.5

Vulnerabilities 2

  • Unscored —
    CVE-2014-0106

    Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete r…

    sudo Debian
  • Unscored —
    CVE-2014-9680

    sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows lo…

    sudo sudo Debian Ubuntu