drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Zwei Probleme in Sudo (Aktualisierung)
Name: |
Zwei Probleme in Sudo (Aktualisierung) |
|
ID: |
USN-4705-2 |
|
Distribution: |
Ubuntu |
|
Plattformen: |
Ubuntu 12.04 ESM, Ubuntu 14.04 ESM |
|
Datum: |
Mi, 27. Januar 2021, 23:13 |
|
Referenzen: |
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-3156 |
|
Applikationen: |
sudo |
|
Update von: |
Zwei Probleme in Sudo |
|
Originalnachricht |
--===============2885783933710347454== Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="tKW2IUtsqtDRztdT" Content-Disposition: inline
--tKW2IUtsqtDRztdT Content-Type: text/plain; charset=us-ascii Content-Disposition: inline
========================================================================== Ubuntu Security Notice USN-4705-2 January 27, 2021
sudo vulnerability ==========================================================================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 14.04 ESM - Ubuntu 12.04 ESM
Summary:
Several security issues were fixed in Sudo.
Software Description: - sudo: Provide limited super user privileges to specific users
Details:
USN-4705-1 fixed a vulnerability in Sudo. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM.
Original advisory details:
It was discovered that Sudo incorrectly handled memory when parsing command lines. A local attacker could possibly use this issue to obtain unintended access to the administrator account. (CVE-2021-3156)
Update instructions:
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04 ESM: sudo 1.8.9p5-1ubuntu1.5+esm6
Ubuntu 12.04 ESM: sudo 1.8.3p1-1ubuntu3.10
In general, a standard system update will make all the necessary changes.
References: https://usn.ubuntu.com/4705-2 https://usn.ubuntu.com/4705-1 CVE-2021-3156
--tKW2IUtsqtDRztdT Content-Type: application/pgp-signature; name="signature.asc"
-----BEGIN PGP SIGNATURE-----
iQIzBAABCgAdFiEEf+ebRFcoyOoAQoOeRbznW4QLH2kFAmARhUoACgkQRbznW4QL H2lRGA/9En2CI5xNdakA3iYoyJm44spjvJdQferkHTz/P7J/tRWyaszQUmXXW/Gb 8RmHVRhyLjk5QWJunvSV96dtd9ZIJYr+LkxLjitbOPGTbRs75oAAWPUAh5+cidhJ XRG+i7OCsbTvTveo55/hqva8mbR0dHvHvAv5VKliQXBXEsLhHcxCia6RnWwzqOxz adWMPF9Vvw1UBFRHplyR416dWiaM81hO6eM+jLrFCIc4Vkk8LWJcF/BwrxNd10Ll G1bBykHP/iD5kySvVO9HzCGwsw5T+vOfOgMaZrAmWVoP129hii3kiWVGgYjWQh8P 5adlgaT5lcnvY163nnRhqveo9CtLs9gbOROZpD3QbLXs6Pf/XTWzmJzrK0aqtcNf rAQDFT2AcyyPNse7BzXYSnLy9nAQlaFlBl9tzxKDSwCcmIuvgdHCv3KstUC8KQIN cEwJgtSojzrVYpSswx6nxWEWYWyoP16GZyPMaxJnRcoemWp+rW/hGOHamt98Djdf q6Ws8woEBw6EvVq2Xzo7TnKlCkPh92cdwEMPrcje87lSmTdJ50FI8mK/zwds2PCd mIZ/Q5TQxC/d5anLdbf0bMfCjLKK/Ch1yT0xmiWvKZ9ht6j1zw8kfHZxFX/v629r ZQfz1EpWn8JHWfNfLkMyeMTDwzD31axh68tPYUj2Ulfyr+xr9Ok= =qmlD -----END PGP SIGNATURE-----
--tKW2IUtsqtDRztdT--
--===============2885783933710347454== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline
-- ubuntu-security-announce mailing list ubuntu-security-announce@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-security-announce
|
|
|
|