oss-security - Re: CVE request: sudo authentication bypass when clock is reset

Message-Id: <201302281024.r1SAO13r004834@core.courtesan.com>
Date: Thu, 28 Feb 2013 05:24:01 -0500
From: "Todd C. Miller" <Todd.Miller@...rtesan.com>
To: oss security list <oss-security@...ts.openwall.com>
Subject: Re: CVE request: sudo authentication bypass when clock is reset

On Wed, 27 Feb 2013 11:23:29 EST, "Todd C. Miller" wrote:

> Sudo versions affected:
>     Sudo 1.6.0 through 1.7.10p7 and sudo 1.8.0 through 1.8.6p7.

The affected versions are actually:

    Sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 inclusive.

 - todd

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.