Re: [packages/sudo] - up to 1.8.28

2019-10-17 Thread Arkadiusz Miśkiewicz
On 17/10/2019 17:18, Elan Ruusamäe wrote: > > On 16/10/2019 14:24, arekm wrote: >> commit 89b19f0a628b14fd900f10b9a70868a4feba74a5 >> Author: Arkadiusz Miśkiewicz >> Date:   Wed Oct 16 13:24:09 2019 +0200 >> >> - up to 1.8.28 >>   * Fixed CVE-2019-14287, a bug where a sudo user may

Re: [packages/sudo] - up to 1.8.28

2019-10-17 Thread Elan Ruusamäe
On 16/10/2019 14:24, arekm wrote: commit 89b19f0a628b14fd900f10b9a70868a4feba74a5 Author: Arkadiusz Miśkiewicz Date: Wed Oct 16 13:24:09 2019 +0200 - up to 1.8.28 * Fixed CVE-2019-14287, a bug where a sudo user may be able to run a command as root when the Runas