CVE-2019-15900

Consolidated details across NVD/Red Hat/OSV/PRION/CVE records show CVE-2019-15900 affects slicer69 doas before 6.2 on platforms other than OpenBSD. Root cause: on platforms lacking strtonum(3), the code uses sscanf without checking errors and inspects an uninitialized errstr, which can lead to su...

CVE-2019-15901

The CVE concerns slicer69 doas prior to 6.2 on non-OpenBSD platforms (Linux, possibly NetBSD). A setusercontext(3) call intended to adjust UID, primary GID, and secondary GIDs was replaced with a single setuid(2) call. As a result, the group ID is not changed and secondary group IDs are not initi...