Format: 1.8 Date: Thu, 10 Oct 2019 14:47:22 -0400 Source: sudo Binary: sudo sudo-ldap Architecture: i386 i386_translations Version: 1.8.16-0ubuntu1.8 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: sudo - Provide limited super user privileges to specific users sudo-ldap - Provide limited super user privileges to specific users Changes: sudo (1.8.16-0ubuntu1.8) xenial-security; urgency=medium . * SECURITY UPDATE: privilege escalation via UID -1 - debian/patches/CVE-2019-14287.patch: treat an ID of -1 as invalid in lib/util/strtoid.c. - CVE-2019-14287 - debian/patches/CVE-2019-14287-2.patch: fix and add to tests in lib/util/regress/atofoo/atofoo_test.c, plugins/sudoers/regress/testsudoers/test5.out.ok, plugins/sudoers/regress/testsudoers/test5.sh. - CVE-2019-14287 Checksums-Sha1: c622d8a2534753da57ffd7438e9a092268766a31 382502 sudo-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb be9e1c4843cacf40f723e914be7a515434aee421 397646 sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb 9200caef2294d80a96b28b134de4a38bec78bb9d 424764 sudo-ldap_1.8.16-0ubuntu1.8_i386.deb 5c7f8ea342c4ff43439f524e6cd34af3a039a2bc 395866 sudo_1.8.16-0ubuntu1.8_i386.deb 6d94af69257e9f9b66705b22e506f0d6dc749f6c 1449922 sudo_1.8.16-0ubuntu1.8_i386_translations.tar.gz Checksums-Sha256: 4b414e61747765c2ded5926b70179f7ef329b2d98946bcb7e63b12845e4044fe 382502 sudo-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb 2beae3b738b61ad87d03888840a50d098a1d4432442177a69818afc9ebd023aa 397646 sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb cadb513778f48af4384e4b0dcac90e8b519cfd41a23c8296fe47791476f2eabb 424764 sudo-ldap_1.8.16-0ubuntu1.8_i386.deb 4a8a376951d62fd8d000171c58c3ff480462e52b78938e6ebcad6c4369460325 395866 sudo_1.8.16-0ubuntu1.8_i386.deb f2c246c133cdea7f2251fef098876232022e665dff89e0f04d729fa2a7070db0 1449922 sudo_1.8.16-0ubuntu1.8_i386_translations.tar.gz Files: 0165b9a4b2dfd52a2d16b7be03cae868 382502 admin extra sudo-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb 2defdecccb49b8093c466443684086df 397646 admin extra sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_i386.ddeb 8c45442abb7cb38f1100a99c487fbbe2 424764 admin optional sudo-ldap_1.8.16-0ubuntu1.8_i386.deb eb8bfcb879a8598432e4f8232db90efe 395866 admin optional sudo_1.8.16-0ubuntu1.8_i386.deb e17995ff62fa2343bb2d3ef003cc7eae 1449922 raw-translations - sudo_1.8.16-0ubuntu1.8_i386_translations.tar.gz Original-Maintainer: Bdale Garbee