Viewing all changes in revision 34.
- Committer: Bazaar Package Importer
- Date: 2010-08-31 15:55:00 UTC
- Revision ID: james.westby@ubuntu.com-20100831155500-15d6tjbj725zvgp2
* SECURITY UPDATE: privilege escalation via '-g' option when using
'user:group' in Runas_Spec
- update match.c to verify both user and group match sudoers when using
'-g'. Based on patch from upstream.
- CVE-2010-2956
'user:group' in Runas_Spec
- update match.c to verify both user and group match sudoers when using
'-g'. Based on patch from upstream.
- CVE-2010-2956
- files modified:
- debian/changelog
expand all
collapse all
added
removed
