Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > linux.debian.changes > #8644
| From | Debian FTP Masters <ftpmaster@ftp-master.debian.org> |
|---|---|
| Newsgroups | linux.debian.changes |
| Subject | Accepted sudo 1.8.27-1+deb10u3 (source) into proposed-updates->stable-new, proposed-updates |
| Date | 2021-01-27 23:40 +0100 |
| Message-ID | <BC1DJ-1RO-27@gated-at.bofh.it> (permalink) |
| Organization | linux.* mail to news gateway |
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 20 Jan 2021 13:26:17 +0100
Source: sudo
Architecture: source
Version: 1.8.27-1+deb10u3
Distribution: buster-security
Urgency: high
Maintainer: Bdale Garbee <bdale@gag.com>
Changed-By: Salvatore Bonaccorso <carnil@debian.org>
Changes:
sudo (1.8.27-1+deb10u3) buster-security; urgency=high
.
* Non-maintainer upload by the Security Team.
* Sanity check size when converting the first record to TS_LOCKEXCL
* Heap-based buffer overflow (CVE-2021-3156)
- Reset valid_flags to MODE_NONINTERACTIVE for sudoedit
- Add sudoedit flag checks in plugin that are consistent with front-end
- Fix potential buffer overflow when unescaping backslashes in user_args
- Fix the memset offset when converting a v1 timestamp to TS_LOCKEXCL
- Don't assume that argv is allocated as a single flat buffer
Checksums-Sha1:
6e3e811db18c4557420d28ee002748cd4734d9e7 2130 sudo_1.8.27-1+deb10u3.dsc
76022913b4380dba21b55ebe9193042c91206db4 30836 sudo_1.8.27-1+deb10u3.debian.tar.xz
1bbdcb25ea6cceacb3e492cf10cf014c966cd794 5612 sudo_1.8.27-1+deb10u3_source.buildinfo
Checksums-Sha256:
fa25a83685cb69b0313e3f6c775c0f2a2878d77ab901d3c0778f17ce9d530cc1 2130 sudo_1.8.27-1+deb10u3.dsc
9ed1562303725a5d307c637cca3dbb65020b308b082f714b2d86cb2848c26d14 30836 sudo_1.8.27-1+deb10u3.debian.tar.xz
5916b3f27ef3176dfa963515bf53dc1c915339726dd043c67370c2025c99f45a 5612 sudo_1.8.27-1+deb10u3_source.buildinfo
Files:
f7681c957c5556be9fb0d0bae37a6435 2130 admin optional sudo_1.8.27-1+deb10u3.dsc
d42c69b1133331a3953be0682c0c422f 30836 admin optional sudo_1.8.27-1+deb10u3.debian.tar.xz
15b68d3e6a8ffed711e04b00cfd4242a 5612 admin optional sudo_1.8.27-1+deb10u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=NWX8
-----END PGP SIGNATURE-----
Back to linux.debian.changes | Previous | Next | Find similar | Unroll thread
Accepted sudo 1.8.27-1+deb10u3 (source) into proposed-updates->stable-new, proposed-updates Debian FTP Masters <ftpmaster@ftp-master.debian.org> - 2021-01-27 23:40 +0100
csiph-web