OpenBSD / src / izH95WA / In -L (loop) mode, reset the login class each time through the loop.

OpenBSD/src izH95WA — usr.bin/su su.c

2019-12-09 04:51:48 UTC by tb on ⎇

OPENBSD_6_5

   In -L (loop) mode, reset the login class each time through the loop.
   Otherwise, it is possible to log in with another user's login class.
   Fixes CVE-2019-19519.  OK deraadt@ markus@

   OpenBSD 6.5 errata 023

Version	Delta		File
1.73.2.2	+7	-5	usr.bin/su/su.c
	+7	-5	1 files

Unified Split Raw