New: sudo versions prior to 1.8.28 are affected.

https://bugs.busybox.net/show_bug.cgi?id=12261

Bug ID: 12261
Summary: sudo versions prior to 1.8.28 are affected.
Product: buildroot
Version: unspecified
Hardware: All
OS: Linux
Status: NEW
Severity: critical
Priority: P5
Component: Other
Assignee: unassigned at buildroot.uclibc.org
Reporter: francisjy_hu at moxa.com
CC: buildroot at uclibc.org
Target Milestone: ---

According to sudo.ws, sudo versions prior to 1.8.28 are affected due to potential bypass of Runas user restrictions.
Please refer to https://www.sudo.ws/alerts/minus_1_uid.html for the detailed.

You are receiving this mail because:
You are on the CC list for the bug.

https://bugs.busybox.net/show_bug.cgi?id=12261

--- Comment #1 from Alexander Dahl <[email protected]> --- This was already fixed in buildroot master yesterday:
https://git.buildroot.net/buildroot/commit/?id=4a96d627491dbf1ae622053068176ec27d3cdf60

You are receiving this mail because:
You are on the CC list for the bug.

https://bugs.busybox.net/show_bug.cgi?id=12261

Thomas Petazzoni <[email protected]> changed:

What |Removed |Added
----------------------------------------------------------------------------

         Resolution|---                         |FIXED
             Status|NEW                         |RESOLVED

You are receiving this mail because:
You are on the CC list for the bug.