tocsin

Alpine/sudo: high 7.8

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to appe

Action: Upgrade sudo to 1.9.12_p2-r0 or later.

Affected

introducedfixedlast affected
1.8.01.9.12_p2-r0-

Fixed versions

1.9.12_p2-r0

Sources

published · modified · JSON