Ubuntu
sudo package

  1. Bug #1556302
  2. Comment #3

Comment 3 for bug 1556302

Revision history for this message
Steve Langasek (vorlon) wrote :

This change was originally introduced in response to bug #760140.

The upstream change in sudo was never accompanied by a CVE, and the behavior change was never applied to previous releases of Ubuntu, so it didn't seem security sensitive at the time.

I am not opposed to changing this to behave the way Simon describes, but I defer to the Security Team here.