Hosted version appears vulnerable to CVE-2021-3156

[engineer-man]

Hosted version appears vulnerable to CVE-2021-3156

[Vrganj]

It shouldn't be too bad given it's in a container, but sudo should definitely be updated on the server

[ryan-reichenberg]

Just for anyone wondering about this, the sudo binary will have to be updated manually until the patched version(1.9.5p2) is pushed upstream: https://ubuntu.com/security/cve-2021-3156

Looks to be pushed upstream in Arch: https://security.archlinux.org/AVG-1431 -- not sure about other distros though

[lvfrazao]

Not sure if helpful but I've been playing around with sudo and have been using this Dockerfile to help me build different versions. Can be adapted for a bash script or something like that.

FROM ubuntu
RUN apt update && apt install -y git && git clone 'https://github.com/sudo-project/sudo.git'
WORKDIR sudo
RUN git checkout SUDO_1_8_31
ENV DEBIAN_FRONTEND noninteractive
RUN apt -y install automake libtool pkg-config build-essential ccache
RUN ./configure && make && make install
run apt install -y ltrace gdb && chmod u+s /usr/bin/ltrace && chmod u+s /usr/bin/gdb
run apt install -y python3.8
run ln -s /usr/bin/python3.8 /usr/bin/py
# RUN useradd -u 9001 non-root
# USER 9001
WORKDIR / 
ENTRYPOINT bash

[realtux]

a poc was used to demonstrate this on piston and it was indeed vulnerable. sudo has been upgraded.