Format: 1.8 Date: Thu, 10 Oct 2019 14:47:22 -0400 Source: sudo Binary: sudo sudo-ldap Architecture: s390x s390x_translations Version: 1.8.16-0ubuntu1.8 Distribution: xenial Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: sudo - Provide limited super user privileges to specific users sudo-ldap - Provide limited super user privileges to specific users Changes: sudo (1.8.16-0ubuntu1.8) xenial-security; urgency=medium . * SECURITY UPDATE: privilege escalation via UID -1 - debian/patches/CVE-2019-14287.patch: treat an ID of -1 as invalid in lib/util/strtoid.c. - CVE-2019-14287 - debian/patches/CVE-2019-14287-2.patch: fix and add to tests in lib/util/regress/atofoo/atofoo_test.c, plugins/sudoers/regress/testsudoers/test5.out.ok, plugins/sudoers/regress/testsudoers/test5.sh. - CVE-2019-14287 Checksums-Sha1: b2fd1bfe4d3435675caedff7c442433c72b2e699 409170 sudo-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb 5af9fecfeb65b05eec708155d4c4a15585b71cc8 426028 sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb d67dc93c766982bb0a1f4e994d97e04296fd1621 392896 sudo-ldap_1.8.16-0ubuntu1.8_s390x.deb 83e8a002ccac4814728b675651dcb6c9507df9a5 363740 sudo_1.8.16-0ubuntu1.8_s390x.deb 1e0ea40f51056b07a731262fe6ebda6709acc380 1450572 sudo_1.8.16-0ubuntu1.8_s390x_translations.tar.gz Checksums-Sha256: b32742953aff817a48320ed5233cef770f1e7ab6c7c943dc174c21bc7702764f 409170 sudo-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb d961c2af29d7b579bbc67f4e0b274d21d5d559acc7ab08706021675234ca9dcd 426028 sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb ded38ef8af2e621e6c85f71a005dd547c19ee0d4429ad853ce7eec548038f20c 392896 sudo-ldap_1.8.16-0ubuntu1.8_s390x.deb 5c0de81d07b81418856684ad245d3b66a26911312b65692cb239c479b352453c 363740 sudo_1.8.16-0ubuntu1.8_s390x.deb 07a1d18b95992c4f444aa639e7e18b5b252a0b1ab0e831ade3e5959412fbc9cf 1450572 sudo_1.8.16-0ubuntu1.8_s390x_translations.tar.gz Files: 55f6d17f65b95156cb1530eede21cf69 409170 admin extra sudo-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb 9a30e85698d5fdbf1d31a1de61b8abf1 426028 admin extra sudo-ldap-dbgsym_1.8.16-0ubuntu1.8_s390x.ddeb b1a1668fc18a0eebb8e6f909dec1ab28 392896 admin optional sudo-ldap_1.8.16-0ubuntu1.8_s390x.deb 4f7404e9b26b6de448ee67a3c16cd168 363740 admin optional sudo_1.8.16-0ubuntu1.8_s390x.deb a74f0722adee8d086786981c21159f2e 1450572 raw-translations - sudo_1.8.16-0ubuntu1.8_s390x_translations.tar.gz Original-Maintainer: Bdale Garbee