Alpine/doas: high 8.8
In OpenDoas from 6.6 to 6.8 the users PATH variable was incorrectly inherited by authenticated executions if the authenticating rule allowed the user to execute any command. Rules that only allowed to
Action: Upgrade doas to 6.6.1-r1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 6.6.1-r1 | - |
Fixed versions
| 6.6.1-r1 |
Sources
published · modified · JSON