Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-09-08 Thread Adam D. Barratt
Control: tags -1 + pending On Sun, 2017-08-27 at 16:52 +0200, Salvatore Bonaccorso wrote: > Hi > > On Sun, Aug 27, 2017 at 02:33:51PM +0100, Adam D. Barratt wrote: > > Control: tags -1 + confirmed > > > > On Fri, 2017-08-11 at 21:46 +0200, Salvatore Bonaccorso wrote: > > > Attached is the update

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-27 Thread Salvatore Bonaccorso
Hi On Sun, Aug 27, 2017 at 02:33:51PM +0100, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Fri, 2017-08-11 at 21:46 +0200, Salvatore Bonaccorso wrote: > > Attached is the updated debdiff, taking the aproach of integrating > > upstrema commit "Use /proc/self consistently on Linux [.

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-27 Thread Adam D. Barratt
Control: tags -1 + confirmed On Fri, 2017-08-11 at 21:46 +0200, Salvatore Bonaccorso wrote: > Attached is the updated debdiff, taking the aproach of integrating > upstrema commit "Use /proc/self consistently on Linux [...]". Please go ahead. Regards, Adam

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-11 Thread Salvatore Bonaccorso
Control: tags -1 - moreinfo On Tue, Aug 08, 2017 at 09:03:46PM +0200, Salvatore Bonaccorso wrote: > Hi Adam, > > On Tue, Aug 08, 2017 at 11:25:53AM -0400, Adam D. Barratt wrote: > > Control: tags -1 + confirmed > > > > On Tue, 2017-08-01 at 15:55 +0200, Salvatore Bonaccorso wrote: > > > sudo in

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-08 Thread Salvatore Bonaccorso
Hi Adam, On Tue, Aug 08, 2017 at 11:25:53AM -0400, Adam D. Barratt wrote: > Control: tags -1 + confirmed > > On Tue, 2017-08-01 at 15:55 +0200, Salvatore Bonaccorso wrote: > > sudo in jessie ist still affected by CVE-2017-1000368. The issue IMHo > > does not need a DSA, since with the previous fi

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-08 Thread Adam D. Barratt
Control: tags -1 + confirmed On Tue, 2017-08-01 at 15:55 +0200, Salvatore Bonaccorso wrote: > sudo in jessie ist still affected by CVE-2017-1000368. The issue IMHo > does not need a DSA, since with the previous fixes due to the /dev > traversal changes the issue was not anymore exploitable. Still

Bug#870376: jessie-pu: package sudo/1.8.10p3-1+deb8u5

2017-08-01 Thread Salvatore Bonaccorso
Package: release.debian.org Severity: normal Tags: jessie User: release.debian@packages.debian.org Usertags: pu Hi sudo in jessie ist still affected by CVE-2017-1000368. The issue IMHo does not need a DSA, since with the previous fixes due to the /dev traversal changes the issue was not anymo