Changqing Li ff408c9793 sudo: fix CVE-2019-14287 ...

In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer
account can bypass certain policy blacklists and session PAM modules,
and can cause incorrect logging, by invoking sudo with a crafted user
ID. For example, this allows bypass of !root configuration, and USER=
logging, for a "sudo -u \#$((0xffffffff))" command.

(From OE-Core rev: 4e11cd561f2bdaa6807cf02ee7c9870881826308)

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

2019-10-23 16:30:36 +01:00

..

files

sudo: fix pam config on systemd systems

2016-04-13 10:12:52 +01:00

sudo

sudo: fix CVE-2019-14287

2019-10-23 16:30:36 +01:00

sudo_1.8.27.bb

sudo: fix CVE-2019-14287

2019-10-23 16:30:36 +01:00

sudo.inc

sudo: Fix BSD license file checksum

2019-08-21 21:52:59 +01:00