~ubuntu-branches/ubuntu/lucid/sudo/lucid-security

Viewing all changes in revision 43.

  • Committer: Package Import Robot
  • Author(s): Marc Deslauriers
  • Date: 2015-03-12 12:21:20 UTC
  • Revision ID: package-import@ubuntu.com-20150312122120-s0ig1gyjm0zs4s97
Tags: 1.7.2p1-1ubuntu5.8
* SECURITY UPDATE: arbitrary file access via TZ
  - configure, configure.in, doc/sudoers.cat, doc/sudoers.man.in,
    pathnames.h.in, plugins/sudoers/env.c: sanity check TZ env variable.
  - http://www.sudo.ws/repos/sudo/rev/650ac6938b59
  - http://www.sudo.ws/repos/sudo/rev/ac1467f71ac0
  - http://www.sudo.ws/repos/sudo/rev/91859f613b88
  - http://www.sudo.ws/repos/sudo/rev/579b02f0dbe0
  - CVE-2014-9680

expand all expand all

Show diffs side-by-side

added added

removed removed

Lines of Context: