Branches for Karmic

Name Status Last Modified Last Commit
lp:ubuntu/karmic-security/sudo 2 Mature 2011-01-19 10:46:05 UTC
35. * SECURITY UPDATE: privilege escalati...

Author: Jamie Strandboge
Revision Date: 2011-01-19 10:46:05 UTC

* SECURITY UPDATE: privilege escalation via -g when using group Runas_List
  - pwutil.c, sudo.h: add user_in_group(), backported from upstream commits
    48ca8c2eddf8, 72df368a8a0e and 6ebc55d4716b. This is intended to be used
    only with check.c to fix CVE-2011-0010 instead of doing the refactoring.
    Going forward, will need to look at this code also if a flaw is found in
    this refactored code. If needed, the refactoring work is in 48ca8c2eddf8
    and 6ebc55d4716b.
  - check.c: prompt for password when the user is running sudo as himself
    but as a different group. Based on fe8a94f96542.
  - CVE-2011-0010

lp:ubuntu/karmic-updates/sudo 2 Mature 2011-01-19 10:46:05 UTC
35. * SECURITY UPDATE: privilege escalati...

Author: Jamie Strandboge
Revision Date: 2011-01-19 10:46:05 UTC

* SECURITY UPDATE: privilege escalation via -g when using group Runas_List
  - pwutil.c, sudo.h: add user_in_group(), backported from upstream commits
    48ca8c2eddf8, 72df368a8a0e and 6ebc55d4716b. This is intended to be used
    only with check.c to fix CVE-2011-0010 instead of doing the refactoring.
    Going forward, will need to look at this code also if a flaw is found in
    this refactored code. If needed, the refactoring work is in 48ca8c2eddf8
    and 6ebc55d4716b.
  - check.c: prompt for password when the user is running sudo as himself
    but as a different group. Based on fe8a94f96542.
  - CVE-2011-0010

lp:ubuntu/karmic/sudo bug 1 Development 2009-06-28 10:40:21 UTC
30. env.c: add logic similar to pam_env's...

Author: Loïc Minier
Revision Date: 2009-06-22 18:03:45 UTC

env.c: add logic similar to pam_env's stripping of single and double
quotes around /etc/environment env vars; fixes literal quotes in LANG when
using sudo -i; LP: #387262.

13 of 3 results