00d2dec648
upstream changelog: 2017-05-31 Todd C. Miller <Todd.Miller@courtesan.com> * NEWS, configure, configure.ac: Sudo 1.8.20p2 [47836f4c9834] * src/ttyname.c: A command name may also contain newline characters so read /proc/self/stat until EOF. It is not legal for /proc/self/stat to contain embedded NUL bytes so treat the file as corrupt if we see any. With help from Qualys. This is not exploitable due to the /dev traversal changes in sudo 1.8.20p1 (thanks Solar!). [15a46f4007dd] 2017-05-30 Todd C. Miller <Todd.Miller@courtesan.com> * src/ttyname.c: Use /proc/self consistently on Linux. As far as I know, only AIX doesn't support /proc/self. [6f3d9816541b] |
||
---|---|---|
.. | ||
patches | ||
DESCR | ||
distinfo | ||
Makefile | ||
MESSAGE | ||
options.mk | ||
PLIST |