[ubuntu/karmic-security] sudo, sudo (delayed) 1.7.0-1ubuntu2.5 (Accepted)

[Ubuntu Installer]

sudo (1.7.0-1ubuntu2.5) karmic-security; urgency=low

  * SECURITY UPDATE: privilege escalation via '-g' option when using
    'user:group' in Runas_Spec
    - update match.c to verify both user and group match sudoers when using
      '-g'. Based on patch from upstream.
    - CVE-2010-2956

Date: Tue, 31 Aug 2010 15:55:00 -0500
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/karmic/+source/sudo/1.7.0-1ubuntu2.5
-------------- next part --------------
Format: 1.8
Date: Tue, 31 Aug 2010 15:55:00 -0500
Source: sudo
Binary: sudo sudo-ldap
Architecture: source
Version: 1.7.0-1ubuntu2.5
Distribution: karmic-security
Urgency: low
Maintainer: Ubuntu Core Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Jamie Strandboge <jamie at ubuntu.com>
Description: 
 sudo       - Provide limited super user privileges to specific users
 sudo-ldap  - Provide limited super user privileges to specific users
Changes: 
 sudo (1.7.0-1ubuntu2.5) karmic-security; urgency=low
 .
   * SECURITY UPDATE: privilege escalation via '-g' option when using
     'user:group' in Runas_Spec
     - update match.c to verify both user and group match sudoers when using
       '-g'. Based on patch from upstream.
     - CVE-2010-2956
Checksums-Sha1: 
 ecc7cca44c641c9320a2d5f604fb3fa21ec2cef2 1117 sudo_1.7.0-1ubuntu2.5.dsc
 c4bf9225a1136cd530637046eef31d58b120be70 25514 sudo_1.7.0-1ubuntu2.5.diff.gz
Checksums-Sha256: 
 e3ab356c59a0f4d87d81965125960628f8cfeba59d0c15348277e17d6a852c2b 1117 sudo_1.7.0-1ubuntu2.5.dsc
 691110afa61d3a27fbfbde2c5f3e1574d0ce7d97159a55a135820311d2b22831 25514 sudo_1.7.0-1ubuntu2.5.diff.gz
Files: 
 431ea989e3fa57b00f8fb13f3e54a025 1117 admin optional sudo_1.7.0-1ubuntu2.5.dsc
 9bfdb8f41c6a5dd5544e6d6b8ab4ac5c 25514 admin optional sudo_1.7.0-1ubuntu2.5.diff.gz
Original-Maintainer: Bdale Garbee <bdale at gag.com>