Publishing details

Removed from disk on 2023-01-20.
Removal requested on 2023-01-19.
Superseded on 2023-01-18 by sudo - 1.8.21p2-3ubuntu1.5
Published on 2021-01-26
Copied from ubuntu bionic in Private PPA for Ubuntu Security Team by Marc Deslauriers

Changelog

sudo (1.8.21p2-3ubuntu1.4) bionic-security; urgency=medium

  * SECURITY UPDATE: dir existence issue via sudoedit race
    - debian/patches/CVE-2021-23239.patch: fix potential directory existing
      info leak in sudoedit in src/sudo_edit.c.
    - CVE-2021-23239
  * SECURITY UPDATE: heap-based buffer overflow
    - debian/patches/CVE-2021-3156-pre1.patch: check lock record size in
      plugins/sudoers/timestamp.c.
    - debian/patches/CVE-2021-3156-pre2.patch: sanity check size when
      converting the first record to TS_LOCKEXCL in
      plugins/sudoers/timestamp.c.
    - debian/patches/CVE-2021-3156-1.patch: reset valid_flags to
      MODE_NONINTERACTIVE for sudoedit in src/parse_args.c.
    - debian/patches/CVE-2021-3156-2.patch: add sudoedit flag checks in
      plugin in plugins/sudoers/policy.c.
    - debian/patches/CVE-2021-3156-3.patch: fix potential buffer overflow
      when unescaping backslashes in plugins/sudoers/sudoers.c.
    - debian/patches/CVE-2021-3156-4.patch: fix the memset offset when
      converting a v1 timestamp to TS_LOCKEXCL in
      plugins/sudoers/timestamp.c.
    - debian/patches/CVE-2021-3156-5.patch: don't assume that argv is
      allocated as a single flat buffer in src/parse_args.c.
    - CVE-2021-3156
  * debian/control: added tzdata to Build-Depends so that the time zone
    data directory is present during builds.

 -- Marc Deslauriers <email address hidden>  Tue, 19 Jan 2021 09:36:00 -0500

Available diffs

Builds

Package files

sudo-dbgsym_1.8.21p2-3ubuntu1.4_amd64.ddeb (755.5 KiB)
sudo-dbgsym_1.8.21p2-3ubuntu1.4_arm64.ddeb (780.0 KiB)
sudo-dbgsym_1.8.21p2-3ubuntu1.4_armhf.ddeb (733.7 KiB)
sudo-dbgsym_1.8.21p2-3ubuntu1.4_i386.ddeb (640.3 KiB)
sudo-dbgsym_1.8.21p2-3ubuntu1.4_ppc64el.ddeb (857.0 KiB)
sudo-dbgsym_1.8.21p2-3ubuntu1.4_s390x.ddeb (774.2 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_amd64.ddeb (800.6 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_arm64.ddeb (825.2 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_armhf.ddeb (776.9 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_i386.ddeb (675.8 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_ppc64el.ddeb (905.1 KiB)
sudo-ldap-dbgsym_1.8.21p2-3ubuntu1.4_s390x.ddeb (820.5 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_amd64.deb (459.6 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_arm64.deb (411.0 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_armhf.deb (435.8 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_i386.deb (461.3 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_ppc64el.deb (450.8 KiB)
sudo-ldap_1.8.21p2-3ubuntu1.4_s390x.deb (423.0 KiB)
sudo_1.8.21p2-3ubuntu1.4.debian.tar.xz (38.9 KiB)
sudo_1.8.21p2-3ubuntu1.4.dsc (2.1 KiB)
sudo_1.8.21p2-3ubuntu1.4_amd64.deb (418.3 KiB)
sudo_1.8.21p2-3ubuntu1.4_arm64.deb (374.5 KiB)
sudo_1.8.21p2-3ubuntu1.4_armhf.deb (396.7 KiB)
sudo_1.8.21p2-3ubuntu1.4_i386.deb (421.4 KiB)
sudo_1.8.21p2-3ubuntu1.4_ppc64el.deb (412.8 KiB)
sudo_1.8.21p2-3ubuntu1.4_s390x.deb (385.9 KiB)
sudo_1.8.21p2.orig.tar.gz (2.9 MiB)