Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: arch-general@xxxxxxxxxxxxxxxxxxx
Subject: Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
From: David Rosenstrauch via arch-general <arch-general@xxxxxxxxxxxxxxxxxxx>
Date: Fri, 29 Jan 2021 12:31:52 -0500
Cc: David Rosenstrauch <darose@xxxxxxxxxx>
In-reply-to: <04e205b9-0d8c-80b0-de04-8e34f76b84c9@zork.pl>
Reply-to: General Discussion about Arch Linux <arch-general@xxxxxxxxxxxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; Linux x86_64; rv:78.0) Gecko/20100101 Thunderbird/78.7.0



On 1/29/21 12:20 PM, Łukasz Michalski via arch-general wrote:

Hi,

Just checked my servers and all were vulnerable:

Updating to the latest version (sudo-1.9.5.p2-1) closed thisvulnerability. Maybe this should be posted as arch news message?


It was already sent to the arch-security mailing list on 1/26.

DR

References:
- CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
  - From: Łukasz Michalski via arch-general

Prev by Date: Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
Next by Date: Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
Previous by thread: Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
Next by thread: Re: CVE-2021-3156 (Heap-Based Buffer Overflow in Sudo)
Index(es):
- Date
- Thread

[Index of Archives] [Linux Wireless] [Linux Kernel] [ATH6KL] [Linux Bluetooth] [Linux Netdev] [Kernel Newbies] [Share Photos] [IDE] [Security] [Git] [Netfilter] [Bugtraq] [Yosemite News] [MIPS Linux] [ARM Linux] [Linux Security] [Linux RAID] [Linux ATA RAID] [Samba] [Device Mapper]

Powered by Linux