tocsin

Debian/sudo: high 7.8

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option.

Action: Upgrade sudo to 1.9.16p2-3 or later.

Affected

introducedfixedlast affected
01.9.16p2-3-

Fixed versions

1.9.16p2-3

Sources

published · modified · JSON