Format: 1.8 Date: Thu, 10 Oct 2019 14:32:59 -0400 Source: sudo Binary: sudo sudo-ldap Architecture: i386 i386_translations Version: 1.8.21p2-3ubuntu1.1 Distribution: bionic Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Marc Deslauriers Description: sudo - Provide limited super user privileges to specific users sudo-ldap - Provide limited super user privileges to specific users Changes: sudo (1.8.21p2-3ubuntu1.1) bionic-security; urgency=medium . * SECURITY UPDATE: privilege escalation via UID -1 - debian/patches/CVE-2019-14287.patch: treat an ID of -1 as invalid in lib/util/strtoid.c. - CVE-2019-14287 - debian/patches/CVE-2019-14287-2.patch: fix and add to tests in lib/util/regress/atofoo/atofoo_test.c, plugins/sudoers/regress/testsudoers/test5.out.ok, plugins/sudoers/regress/testsudoers/test5.sh. - CVE-2019-14287 Checksums-Sha1: 1b28006f60b76877eddc096272ff4bcc237d32ae 654388 sudo-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb 3d36c47a77a967931b0eb7b4897c3d3e8f22ede1 690760 sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb fa905aedbf7e032a62aeb4dc3639ab4d4a70b97e 470940 sudo-ldap_1.8.21p2-3ubuntu1.1_i386.deb ca62a5e3de765642b7bd3d8a0682a5908c4999b3 7514 sudo_1.8.21p2-3ubuntu1.1_i386.buildinfo 40d022ae70d21d688add87ef0cdefb8c0b01c8ac 430464 sudo_1.8.21p2-3ubuntu1.1_i386.deb 9c31d6e94824422ff32f081b8e1ffb7b5e418be9 1673957 sudo_1.8.21p2-3ubuntu1.1_i386_translations.tar.gz Checksums-Sha256: f1f6c1ccf7738ab1d270f5ccd6d42f456164de4469b6847fc26a13d126c925d6 654388 sudo-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb 03af3185c1267da49faba1f91b52b2d331d71e105456137302ee74f40a8dfd08 690760 sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb 43234f70edc1975f1763d65850c54c70376bc1879cc160920c476b921d6836c4 470940 sudo-ldap_1.8.21p2-3ubuntu1.1_i386.deb 008862716c9248817653c090b3ee82061f45a3589a17c0796f5a6bf7e2de05ea 7514 sudo_1.8.21p2-3ubuntu1.1_i386.buildinfo b0a85cab694cd23df46b71bf0e7e2e10b3f1f2467b48c9156e5d0802601f7d64 430464 sudo_1.8.21p2-3ubuntu1.1_i386.deb 2aa463877681568de54de7e874ad1454b522a914bf9a3ea01fee107bc37ac772 1673957 sudo_1.8.21p2-3ubuntu1.1_i386_translations.tar.gz Files: 79201ee54e307cb9df1c9d17a2c85beb 654388 debug optional sudo-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb cf7c195348fee33aab7407b371462c47 690760 debug optional sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.1_i386.ddeb c823caa3f66541f537c4083f33a0ec02 470940 admin optional sudo-ldap_1.8.21p2-3ubuntu1.1_i386.deb 1440f07a409dc020d74433b4e91c392f 7514 admin optional sudo_1.8.21p2-3ubuntu1.1_i386.buildinfo 0889702ee5d867d36a49ed9031262488 430464 admin optional sudo_1.8.21p2-3ubuntu1.1_i386.deb 6b3b30d14e88922335a48e2b69d03e67 1673957 raw-translations - sudo_1.8.21p2-3ubuntu1.1_i386_translations.tar.gz Original-Maintainer: Bdale Garbee