This bug was fixed in the package sudo - 1.8.3p1-1ubuntu3.6
---------------
sudo (1.8.3p1-1ubuntu3.6) precise-security; urgency=medium
* SECURITY UPDATE: security policy bypass when env_reset is disabled
- debian/patches/CVE-2014-0106.patch: fix logic inversion in
plugins/sudoers/env.c.
- CVE-2014-0106
* debian/sudo.sudo.init, debian/sudo-ldap.sudo.init: Set timestamps to
epoch in init scripts so they are properly invalidated. (LP: #1223297)
-- Marc Deslauriers <[email protected]> Tue, 11 Mar 2014 07:56:53
-0400
** Changed in: sudo (Ubuntu Precise)
Status: Confirmed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2014-0106
** Changed in: sudo (Ubuntu Quantal)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1223297
Title:
sudo init script should set date to epoch, not 1985-01-01
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1223297/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
