openeuler-ci-bot 85f3da13bc

!93 [sync] PR-89: fix CVE-2023-28486 and CVE-2023-28487 ...

From: @openeuler-sync-bot 
Reviewed-by: @HuaxinLuGitee 
Signed-off-by: @HuaxinLuGitee

2023-03-29 16:22:41 +00:00

backport-0001-CVE-2021-3156-Reset-valid_flags.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-0001-CVE-2022-37434.patch

Fix CVE-2022-37434 and CVE-2022-33070

2022-09-05 10:02:47 +08:00

backport-0002-CVE-2021-3156-Add-sudoedit-flag-checks.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-0002-CVE-2022-37434.patch

Fix CVE-2022-37434 and CVE-2022-33070

2022-09-05 10:02:47 +08:00

backport-0003-CVE-2021-3156-Fix-potential-buffer-overflow.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-0004-CVE-2021-3156-Fix-the-memset-offset.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-0005-CVE-2021-3156-Dont-assume-that-argv.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-CVE-2021-23239-Fix-potential-directory.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-CVE-2021-23240-Add-security-checks.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-CVE-2023-22809.patch

Fix CVE-2023-22809

2023-01-30 14:07:16 +08:00

backport-CVE-2023-28486_CVE-2023-28487.patch

fix CVE-2023-28486 and CVE-2023-28487

2023-03-29 20:37:36 +08:00

backport-cvtsudoers-Prevent-sudo-from-reading-into-undefined-.patch

Backport patches from upstream community.

2022-12-08 20:29:40 +08:00

backport-Fix-a-potential-use-after-free-bug-with-cvtsudoers-f.patch

Backport patches from upstream community.

2022-12-08 20:29:40 +08:00

backport-fix-CVE-2022-33070.patch

Fix CVE-2022-37434 and CVE-2022-33070

2022-09-05 10:02:47 +08:00

backport-Fix-CVE-2022-43995-potential-heap-overflow-for-passwords.patch

Fix CVE-2022-43995

2022-11-07 10:17:34 +08:00

backport-Fix-incorrect-SHA384-512-digest-calculation.patch

Backport patches from upstream community

2022-11-23 03:51:06 +00:00

backport-Fix-memory-leak-of-pass-in-converse.patch

Backport patches from upstream community.

2022-12-08 20:29:40 +08:00

backport-Fix-runstatedir-handling-for-distros-that-do-not-support-it.patch

Fix runstatedir handling for distros that do not support it

2021-01-29 15:54:07 +08:00

backport-Fix-some-warnings-from-pvs-studio.patch

fix CVE-2021-23239 CVE-2021-23240 CVE-2021-3156

2021-01-27 20:46:28 +08:00

backport-In-json_stack_push-treat-stack-exhaustion-like-memory-allocation-failure.patch

Treat stack exhaustion like memory allocation failure

2021-09-16 16:23:53 +08:00

backport-Only-strip-double-quotes-from-an-include-path-if-len.patch

fix an out of bounds read and another issue found by fuzz

2021-12-23 11:41:46 +08:00

backport-Strict-tz-offset-parsing.patch

fix an out of bounds read and another issue found by fuzz

2021-12-23 11:41:46 +08:00

backport-Stricter-parsing-of-generalized-time.patch

fix an out of bounds read and another issue found by fuzz

2021-12-23 11:41:46 +08:00

backport-sudo_passwd_cleanup-Set-auth-data-to-NULL-after-free.patch

Backport patches from upstream community.

2022-12-08 20:29:40 +08:00

backport-sudo_passwd_verify-zero-out-des_pass-before-returnin.patch

Backport patches from upstream community

2022-11-23 03:51:06 +00:00

sudo

Package init

2019-09-30 11:17:51 -04:00

sudo-1.9.2.tar.gz

update to 1.9.2

2020-08-27 16:26:00 +08:00

sudo-i

Package init

2019-09-30 11:17:51 -04:00

sudo.spec

fix CVE-2023-28486 and CVE-2023-28487

2023-03-29 20:37:36 +08:00

sudoers

update to 1.9.2

2020-08-27 16:26:00 +08:00

Description

No description provided

7 MiB

Languages

Diff 100%