Format: 1.8 Date: Wed, 27 Jan 2021 08:49:33 -0300 Source: sudo Binary: sudo sudo-ldap Architecture: amd64 amd64_translations Version: 1.8.3p1-1ubuntu3.10 Distribution: precise Urgency: medium Maintainer: Launchpad Build Daemon Changed-By: Leonidas Da Silva Barbosa Description: sudo - Provide limited super user privileges to specific users sudo-ldap - Provide limited super user privileges to specific users Changes: sudo (1.8.3p1-1ubuntu3.10) precise-security; urgency=medium . * SECURITY UPDATE: heap-based buffer overflow - debian/patches/CVE-2021-3156-1.patch: reset valid_flags to MODE_NONINTERACTIVE for sudoedit in src/parse_args.c. - debian/patches/CVE-2021-3156-2.patch: add sudoedit flag checks in plugin in plugins/sudoers/sudoers.c. - debian/patches/CVE-2021-3156-3.patch: fix potential buffer overflow when unescaping backslashes in plugins/sudoers/sudoers.c. - debian/patches/CVE-2021-3156-5.patch: don't assume that argv is allocated as a single flat buffer in src/parse_args.c. - CVE-2021-3156 Checksums-Sha1: 074c7ed252d70087845e502a7782f4f4b9d3850c 288378 sudo_1.8.3p1-1ubuntu3.10_amd64.deb cc0fc64c26a8708b8e96239e8111b16db72d5301 315084 sudo-ldap_1.8.3p1-1ubuntu3.10_amd64.deb b2889b0208ffad0c355203cff005f9f3c88ef54a 182740 sudo-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb ee78f32770f5bacd6adc76cf2e49cb315161040a 195046 sudo-ldap-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb e7b35c9adc8fa5f2c460ac92e1c97bc6252baa06 420178 sudo_1.8.3p1-1ubuntu3.10_amd64_translations.tar.gz Checksums-Sha256: 9521e33c6afcf1cc63daa6b0bd5799ef9950ba3d93efd678180f1faab12b467c 288378 sudo_1.8.3p1-1ubuntu3.10_amd64.deb 548902d36b55d58aa83e5b4cca629f31dfe4735ab2bfd3e06780ab369b593cd0 315084 sudo-ldap_1.8.3p1-1ubuntu3.10_amd64.deb 52e2d0a8e9f30969add3d90b17887adc777e822fb00bdad67d8d9a15897569ba 182740 sudo-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb 85d52f0770b0aba5c1b35e304793e41b353dbdd3ce5a6f45ec69389f4ab9729c 195046 sudo-ldap-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb e2bd4c04d7fc972cad4e7308124cf7265455dd7a168cd702313ac3896bb72721 420178 sudo_1.8.3p1-1ubuntu3.10_amd64_translations.tar.gz Files: 2d880275728d60e18215ff45f5d483f1 288378 admin optional sudo_1.8.3p1-1ubuntu3.10_amd64.deb e799347d6ef023adc1b2e0af395a5c21 315084 admin optional sudo-ldap_1.8.3p1-1ubuntu3.10_amd64.deb 5a73bc3e4df282620fe08e0a087a1683 182740 admin extra sudo-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb f570f08191d5606d40f7933370c72e67 195046 admin extra sudo-ldap-dbgsym_1.8.3p1-1ubuntu3.10_amd64.ddeb 6d665747a06a49127412af7de566c20d 420178 raw-translations - sudo_1.8.3p1-1ubuntu3.10_amd64_translations.tar.gz Original-Maintainer: Bdale Garbee