OpenBSD / src / EHBleYv / In -L (loop) mode, reset the login class each time through the loop.

OpenBSD/src EHBleYv — usr.bin/su su.c

2019-12-09 04:50:42 UTC by tb on ⎇

OPENBSD_6_6

   In -L (loop) mode, reset the login class each time through the loop.
   Otherwise, it is possible to log in with another user's login class.
   Fixes CVE-2019-19519.  OK deraadt@ markus@

   OpenBSD 6.6 errata 012

Version	Delta		File
1.77.2.2	+7	-5	usr.bin/su/su.c
	+7	-5	1 files

Unified Split Raw