- up to 1.8.28

 * Fixed CVE-2019-14287, a bug where a sudo user may be able to
   run a command as root when the Runas specification explicitly
   disallows root access as long as the ALL keyword is listed first.

diff --git a/sudo.spec b/sudo.spec
index 8a72884dc9fe9d1ef845294ba9c66fe1e95505b7..7597a23d4d0f8b08b7653f59b9e3bd9a6a3dc60e 100644 (file)
--- a/sudo.spec
+++ b/sudo.spec
@@ -28,13 +28,13 @@ Summary(ru.UTF-8):  Позволяет определенным пользова
 Summary(uk.UTF-8):     Дозволяє вказаним користувачам виконувати команди від імені root
 Name:          sudo
 # please see doc/UPGRADE for important changes each time updating sudo
-Version:       1.8.27
+Version:       1.8.28
 Release:       1
 Epoch:         1
 License:       BSD
 Group:         Applications/System
 Source0:       ftp://ftp.sudo.ws/pub/sudo/%{name}-%{version}.tar.gz
-# Source0-md5: b5c184b13b6b5de32af630af2fd013fd
+# Source0-md5: 5afa5acd0c55b40916e4ad864607edfe
 Source1:       %{name}.pamd
 Source2:       %{name}-i.pamd
 Patch0:                %{name}-env.patch