Bug#595935: CVE-2010-1646: Flaw in Runas group matching

[Bdale Garbee]

On Tue, 7 Sep 2010 14:45:59 +0200, Moritz Mühlenhoff 
<muehlenh...@univention.de> wrote:
> Hi,
> 
> Am Dienstag 07 September 2010 14:37:35 schrieb Moritz Muehlenhoff:
> > Package: sudo
> > Version: 1.6.9p17-2
> > Severity: grave
> > Tags: security
> > Justification: user security hole
> >
> > Please see http://www.sudo.ws/sudo/alerts/runas_group.html for
> > details. Stable is not affected.
> 
> The CVE ID should be CVE-2010-2956, the given ID is incorrect.

I'm on it, I'll make a 1.7.4p4 upload sometime today.

Bdale

pgp1AV52OoPx1.pgp
Description: PGP signature