Page MenuHomeFreeBSD

Update sudo to 1.9.5p2
ClosedPublic

Authored by cy on Jan 26 2021, 8:07 PM.
Tags
None
Referenced Files
Unknown Object (File)
Sat, Oct 19, 4:45 PM
Unknown Object (File)
Sat, Oct 19, 4:45 PM
Unknown Object (File)
Sat, Oct 19, 4:45 PM
Unknown Object (File)
Sat, Oct 19, 4:24 PM
Unknown Object (File)
Sep 24 2024, 2:31 AM
Unknown Object (File)
Sep 22 2024, 8:18 PM
Unknown Object (File)
Sep 11 2024, 2:07 PM
Unknown Object (File)
Sep 8 2024, 6:31 AM
Subscribers

Details

Summary

This update fixes these two CVEs.

  • When invoked as sudoedit, the same set of command line options are now accepted as for "sudo -e". The -H and -P options are now rejected for sudoedit and "sudo -e" which matches the sudo 1.7 behavior. This is part of the fix for CVE-2021-3156.
  • Fixed a potential buffer overflow when unescaping backslashes in the command's arguments. Normally, sudo escapes special

See also https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=253034.

characters when running a command via a shell (sudo -s or sudo
-i).  However, it was also possible to run sudoedit with the -s
or -i flags in which case no escaping had actually been done,
making a buffer overflow possible.  This fixes CVE-2021-3156.
Test Plan

Tested here.

Diff Detail

Repository
rP FreeBSD ports repository
Lint
Lint Not Applicable
Unit
Tests Not Applicable

Event Timeline

cy requested review of this revision.Jan 26 2021, 8:07 PM
cy added a reviewer: garga.
cy edited the summary of this revision. (Show Details)
This revision is now accepted and ready to land.Jan 26 2021, 8:09 PM
This revision was automatically updated to reflect the committed changes.

Approved: ports-secteam (delphij)