[sudo-commits] sudo changeset 11801:83db8dba09e7

[Todd C. Miller]

changeset:	11801:83db8dba09e7 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/83db8dba09e7
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Thu Oct 10 10:04:13 2019 -0600

Log Message:
	Treat an ID of -1 as invalid since that means "no change".
	Fixes CVE-2019-14287.
	Found by Joe Vennix from Apple Information Security.

diffstat:

 NEWS               |    4 ++
 lib/util/strtoid.c |  100 ++++++++++++++++++++++++++++------------------------
 2 files changed, 57 insertions(+), 47 deletions(-)