Added a check for CVE-2023-22809 (Sudoedit bypass in Sudo <= 1.9.12p1).
I also fixed a bug in lse_get_pkg_version. A package installed with dpkg can be set to hold in order to exclude it from future updates. This is exactly a situation that might lead to a vulnerable version being present on the system. So also match this case.
Added a check for CVE-2023-22809 (Sudoedit bypass in Sudo <= 1.9.12p1).
I also fixed a bug in
lse_get_pkg_version
. A package installed withdpkg
can be set to hold in order to exclude it from future updates. This is exactly a situation that might lead to a vulnerable version being present on the system. So also match this case.