openSUSE Build Service

Overview Details Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo (Revision bf933a3ccde95d533f908a1aa0826ae2)

Currently displaying revision bf933a3ccde95d533f908a1aa0826ae2 , Show latest

<patchinfo incident="6911">
  <issue id="1042146" tracker="bnc">VUL-0: CVE-2017-1000368: sudo: path traversal race conditions, follow up problem</issue>
  <issue id="1034560" tracker="bnc">sudo-1.8.10p3-1.62.x86_64.rpm sudo_dso_find_sym library incorrectly linked.</issue>
  <issue id="2017-1000368" tracker="cve" />
  <category>security</category>
  <rating>important</rating>
  <packager>vitezslav_cizek</packager>
  <description>This update for sudo fixes the following security issue:

- CVE-2017-1000368: A follow-up fix to CVE-2017-1000367, the Linux process name could also contain a
  newline, which could be used to trick sudo to read/write to an
  arbitrary open terminal. (bsc#1042146)

Also the following non security bug was fixed:

- Link the "system_group" plugin with sudo_util library to resolve the missing sudo_dso_findsym symbol (bsc#1034560)

This update was imported from the SUSE:SLE-12-SP2:Update update project.</description>
  <summary>Security update for sudo</summary>
<stopped>review sles text</stopped>
</patchinfo>

Places

File _patchinfo of Package patchinfo (Revision bf933a3ccde95d533f908a1aa0826ae2)

Places