sudo (1.8.16-0ubuntu1.8) xenial-security; urgency=medium
* SECURITY UPDATE: privilege escalation via UID -1
- debian/patches/CVE-2019-14287.patch: treat an ID of -1 as invalid
in lib/util/strtoid.c.
- CVE-2019-14287
- debian/patches/CVE-2019-14287-2.patch: fix and add to tests in
lib/util/regress/atofoo/atofoo_test.c,
plugins/sudoers/regress/testsudoers/test5.out.ok,
plugins/sudoers/regress/testsudoers/test5.sh.
- CVE-2019-14287
Date: 2019-10-11 11:58:18.068957+00:00
Changed-By: Marc Deslauriers <[email protected]>
Signed-By: [email protected] (Leonidas S. Barbosa)
https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.8
Sorry, changesfile not available.
--
Xenial-changes mailing list
[email protected]
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/xenial-changes
