Debian/sudo: low 3.3
sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by
Action: Upgrade sudo to 1.8.12-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.8.12-1 | - |
Fixed versions
| 1.8.12-1 |
Sources
published · modified · JSON