Secunia

Conectiva has issued an update for slocate. This eliminates a vulnerability, which can be exploited by malicious, local users to escalate their privileges.

The problem is, that slocate contains a boundary error, which can be exploited by causing a buffer overflow. The buffer overflow may be caused by supplying 1024 characters long arguments to the -c and -r command line parameters. slocate is installed setgid thereby allowing users to gain privileges of the slocate group. This could allow users to read the slocate database containing information about all files on the system.

Solution
Updated packages:
Further details available in Customer Area

Deep Links
Links available in Customer Area