Ubuntu
sudo package

sudo 1.9.9-1ubuntu2.4 source package in Ubuntu

Changelog

sudo (1.9.9-1ubuntu2.4) jammy-security; urgency=medium

  * SECURITY UPDATE: does not escape control characters
    - debian/patches/CVE-2023-2848x-1.patch: escape control characters in
      log messages and sudoreplay output in docs/sudoers.man.in,
      docs/sudoers.mdoc.in, docs/sudoreplay.man.in,
      docs/sudoreplay.mdoc.in, include/sudo_lbuf.h,
      lib/eventlog/eventlog.c, lib/iolog/iolog_json.c, lib/util/lbuf.c,
      lib/util/util.exp.in, plugins/sudoers/sudoreplay.c.
    - debian/patches/CVE-2023-2848x-2.patch: fix regression in
      lib/eventlog/eventlog.c.
    - CVE-2023-28486
    - CVE-2023-28487

 -- Marc Deslauriers <email address hidden>  Mon, 03 Apr 2023 14:00:44 -0400

Upload details

Uploaded by:
Marc Deslauriers
Uploaded to:
Jammy
Original maintainer:
Ubuntu Developers
Architectures:
any
Section:
admin
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section
Jammy updates main admin
Jammy security main admin

Downloads

File Size SHA-256 Checksum
sudo_1.9.9.orig.tar.gz 4.3 MiB 6d6ee863a3bc26c87661093a74ec63e10fd031ceba714642d21636dfe25e3e00
sudo_1.9.9.orig.tar.gz.asc 833 bytes 799e03bdeb3d4eaaefed3cb16546bcd6cba310d573ad4dc39cf5bbf91578810c
sudo_1.9.9-1ubuntu2.4.debian.tar.xz 50.2 KiB 5e07ea8a3e6697e521102107900a360a167b35770c4d3b21dd572c2530d2f307
sudo_1.9.9-1ubuntu2.4.dsc 2.5 KiB 8f356ed2e36e44113ac9cbfd5b344c22742095969256df30c9809dfb1124024a

View changes file

Binary packages built by this source

sudo: Provide limited super user privileges to specific users

 Sudo is a program designed to allow a sysadmin to give limited root
 privileges to users and log root activity. The basic philosophy is to give
 as few privileges as possible but still allow people to get their work done.
 .
 This version is built with minimal shared library dependencies, use the
 sudo-ldap package instead if you need LDAP support for sudoers.

sudo-dbgsym: debug symbols for sudo
sudo-ldap: Provide limited super user privileges (with LDAP support)

 Sudo is a program designed to allow a sysadmin to give limited root
 privileges to users and log root activity. The basic philosophy is to give
 as few privileges as possible but still allow people to get their work done.
 .
 This version is built with LDAP support, which allows an equivalent of the
 sudoers database to be distributed via LDAP. Authentication is still
 performed via pam.

sudo-ldap-dbgsym: debug symbols for sudo-ldap