Re: apt-listbugs and security

[Joris Huizer <jorishuizer@planet.nl>]

david cuthbertson wrote:
> Hi,
>
> Installing sudo returns the apt-listbugs message:
>
> Critical bugs of sudo (-> 1.6.8p7-1.2 )<open>
> #315115 -[bugtrak] sudo version 1.6.8p9 now available,
> fixes security issue.
> Merged with:315718
>
> The trouble is that I can't find v. 1.6.8p9 from the
> stable package list, and etch provides sudo
> 1.6.8p12-1, but I would rather not have a mixed
> system.
>
> What is the best way of dealing with this?
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=315115
> provides me with more information than I can easily
> manage.
>
> Cheers,
> Dave

Well, you can backport it to sarge:
apt-get build-dep sudo
apt-get -b -t testing source sudo
or, alternatively (if it complains about dependencies), do not use the 
-b flag and compile it yourself

But - except for not dragging in dependencies, that still mixes sarge 
with a non-sarge version of sudo :-/

HTH,

Joris