[arch-dev-public] [signoff] sudo-1.7.4.p4
Guillaume ALAUX
guillaume at archlinux.org
Thu Sep 9 08:36:34 EDT 2010
On 9 September 2010 07:30, Allan McRae <allan at archlinux.org> wrote:
> Upstream security fix release:
>
> This release fixes a security issue with respect to the handling
> of sudo's -g command line option when -u is also specified. The
> flaw may allow an attacker to run commands as a user that is not
> authorized by the sudoers file. For more details, see:
> http://www.sudo.ws/sudo/alerts/runas_group.html
>
> Some quick signoffs would be good...
>
> Signoff both,
> Allan
signoff i686
--
Guillaume
--
Guillaume
More information about the arch-dev-public
mailing list