This bug was fixed in the package sudo - 1.8.16-0ubuntu1.1
---
sudo (1.8.16-0ubuntu1.1) xenial; urgency=medium
* debian/patches/lp1565567.patch: fix crash when looking up a negative
cached entry which is stored as a NULL passwd or group struct pointer
in plugins/sudoers/pwut
I also confirm that sudo is functioning correctly with sssd via ldap
after installing the proposed package.
Thank you Marc, and sorry for the duplicate bug at
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1575239
--
You received this bug notification because you are a member of Ubuntu
Bugs
I've tested 1.8.16-0ubuntu1.1 in xenial-proposed on my xenial install
where sudo was segfaulting when a user authenticated via sssd. I can
confirm this fixes the issue I was having. User's commands now execute
as expected instead of a segfault.
--
You received this bug notification because you ar
Don't worry about it, I changed it back. :)
** Changed in: sudo (Ubuntu Xenial)
Status: Fix Released => Fix Committed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv in sud
For the record, I did not intend to edit the status of this as recorded
above and am unable to revert it. That's embarrassing, sorry. I was
simply looking to see if there was more info about when this might be
released.
--
You received this bug notification because you are a member of Ubuntu
Bugs
** Changed in: sudo (Ubuntu Xenial)
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv in sudo_getgrgid
To manage notifications about thi
I just verified that sudo fix seems good within yakkety. Marking it as
verification-done.
** Tags removed: verification-needed
** Tags added: verification-done
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net
This bug was fixed in the package sudo - 1.8.16-0ubuntu2
---
sudo (1.8.16-0ubuntu2) yakkety; urgency=medium
* debian/patches/lp1565567.patch: fix crash when looking up a negative
cached entry which is stored as a NULL passwd or group struct pointer
in plugins/sudoers/pwutil.
Hello LaMont, or anyone else affected,
Accepted sudo into xenial-proposed. The package will build now and be
available at https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.1
in a few hours, and then in the -proposed repository.
Please help us by testing this new package. See
https://wiki
Packages in the PPA have been successfully tested, and upstream has
commited a slightly more exhaustive fix:
https://www.sudo.ws/repos/sudo/rev/1d13341d53ec
I have uploaded the fix to yakkety.
I have uploaded the fix to xenial for processing by the SRU team.
** Changed in: sudo (Ubuntu)
S
Thanks for the detailed analysis.
I have uploaded a package for testing with the minimal fix in the
following PPA:
https://launchpad.net/~mdeslaur/+archive/ubuntu/testing
Once it's finished building, could someone please check if the package
resolves their issue? If so, I'll upload it to propose
** Also affects: sudo (Ubuntu Xenial)
Importance: Undecided
Status: New
** Changed in: sudo (Ubuntu Xenial)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565
This patch was exposed by:
"also_check_sudo_group.diff"
(since user was in "sudo" group and should have stopped user_in_group
before)
Right after being caused by:
commit a1663632dc5ab7e7c01e17206854b6f0ba0347dd
Author: Todd C. Miller
Date: Fri Jan 22 17:04:59 2016 -0700
Additional debug
Summary:
Users coming from LDAP in groups ADMIN or SUDO will experience this
problem.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv in sudo_getgrgid
To manage notifications abo
(3)
Unfortunately this was caused by patch:
"also_check_sudo_group.diff"
Description: also check the sudo group to create the admin flag file
Author: Marc Deslauriers
Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1387347
Updated: 2016-03-30
--
You received this bug notificat
It was brought to my attention a crash just like this one. Here is my
analsysis:
## INTRODUCTION
# From plugins/sudoers/pwutil.c:
/*
* Get a password entry by uid and allocate space for it.
*/
struct passwd *
sudo_getpwuid(uid_t uid)
{
struct cache_item key, *item;
struct rbnode *node;
(2)
Going back to backtrace we have:
mode_run -> policy_check -> sudoers_policy_main -
>create_admin_success_flag -> user_in_group (global sudo_user)
/* Check whether the user is in the admin group. */
if (!user_in_group(sudo_user.pw, "admin") &&
!user_in_group(sudo_user.pw, "sudo")
Following execution path I get:
(1)
mode_run -> policy_check -> sudoers_policy_main -> sudoers_policy_init:
- init_vars (fills global variable sudo_user)
- sudo_user->pwd (from global struct passwd) will be used in "user_in_group"
as "struct passwd" of executing user
- it will check wh
The segmentation fault[1] is due to a NULL pointer dereference[2] at :
sudo-1.8.16/plugins/sudoers/pwutil.c[3]
[1] Core was generated by `sudo bash'.
Program terminated with signal SIGSEGV, Segmentation fault.
#0 0x7fa01c0a6944 in sudo_getgrgid (gid=7241)
at /build/sudo-g3ghsu/sudo-1.8.16/plug
Status changed to 'Confirmed' because the bug affects multiple users.
** Changed in: sudo (Ubuntu)
Status: New => Confirmed
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv
** Tags added: xenial
** Changed in: sudo (Ubuntu)
Importance: Undecided => High
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv in sudo_getgrgid
To manage notifications about
this is with current xenial (1.8.16-0ubuntu1)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1565567
Title:
segv in sudo_getgrgid
To manage notifications about this bug go to:
https://bugs.launchpad
22 matches
Mail list logo
