Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/sudo@1.6.8p3-1?distro=trixie
purl pkg:deb/debian/sudo@1.6.8p3-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-1s26-jrut-puf4 CVE-2004-1051 bash scripts run via Sudo can be subverted (CVE-2005-4158, CVE-2006-0151) CVE-2004-1051
VCID-xg63-xrvm-nkbr sudoedit (aka sudo -e) in sudo 1.6.8 opens a temporary file with root privileges, which allows local users to read arbitrary files via a symlink attack on the temporary file before quitting sudoedit. CVE-2004-1689

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T12:54:25.135321+00:00 Debian Importer Fixing VCID-1s26-jrut-puf4 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T10:23:47.416062+00:00 Debian Importer Fixing VCID-xg63-xrvm-nkbr https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T08:51:42.274615+00:00 Debian Importer Fixing VCID-1s26-jrut-puf4 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T07:00:25.067331+00:00 Debian Importer Fixing VCID-xg63-xrvm-nkbr https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:53:32.810419+00:00 Debian Importer Fixing VCID-xg63-xrvm-nkbr https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:53:32.765927+00:00 Debian Importer Fixing VCID-1s26-jrut-puf4 https://security-tracker.debian.org/tracker/data/json 38.1.0