[arch-dev-public] [signoff] sudo-1.7.4.p4

Guillaume ALAUX guillaume at archlinux.org
Thu Sep 9 08:36:34 EDT 2010


On 9 September 2010 07:30, Allan McRae <allan at archlinux.org> wrote:
> Upstream security fix release:
>
> This release fixes a security issue with respect to the handling
> of sudo's -g command line option when -u is also specified.  The
> flaw may allow an attacker to run commands as a user that is not
> authorized by the sudoers file.  For more details, see:
>    http://www.sudo.ws/sudo/alerts/runas_group.html
>
> Some quick signoffs would be good...
>
> Signoff both,
> Allan

signoff i686

--
Guillaume


--
Guillaume


More information about the arch-dev-public mailing list