[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

This bug was fixed in the package sudo - 1.8.16-0ubuntu1.1 --- sudo (1.8.16-0ubuntu1.1) xenial; urgency=medium * debian/patches/lp1565567.patch: fix crash when looking up a negative cached entry which is stored as a NULL passwd or group struct pointer in

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

I also confirm that sudo is functioning correctly with sssd via ldap after installing the proposed package. Thank you Marc, and sorry for the duplicate bug at https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1575239 -- You received this bug notification because you are a member of Ubuntu

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

I've tested 1.8.16-0ubuntu1.1 in xenial-proposed on my xenial install where sudo was segfaulting when a user authenticated via sssd. I can confirm this fixes the issue I was having. User's commands now execute as expected instead of a segfault. -- You received this bug notification because you

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Don't worry about it, I changed it back. :) ** Changed in: sudo (Ubuntu Xenial) Status: Fix Released => Fix Committed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu.

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

For the record, I did not intend to edit the status of this as recorded above and am unable to revert it. That's embarrassing, sorry. I was simply looking to see if there was more info about when this might be released. -- You received this bug notification because you are a member of Ubuntu

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

** Changed in: sudo (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/1565567 Title: segv in sudo_getgrgid Status

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

I just verified that sudo fix seems good within yakkety. Marking it as verification-done. ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu.

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

This bug was fixed in the package sudo - 1.8.16-0ubuntu2 --- sudo (1.8.16-0ubuntu2) yakkety; urgency=medium * debian/patches/lp1565567.patch: fix crash when looking up a negative cached entry which is stored as a NULL passwd or group struct pointer in

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Hello LaMont, or anyone else affected, Accepted sudo into xenial-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/sudo/1.8.16-0ubuntu1.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Packages in the PPA have been successfully tested, and upstream has commited a slightly more exhaustive fix: https://www.sudo.ws/repos/sudo/rev/1d13341d53ec I have uploaded the fix to yakkety. I have uploaded the fix to xenial for processing by the SRU team. ** Changed in: sudo (Ubuntu)

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

** Also affects: sudo (Ubuntu Xenial) Importance: Undecided Status: New ** Changed in: sudo (Ubuntu Xenial) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu.

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Thanks for the detailed analysis. I have uploaded a package for testing with the minimal fix in the following PPA: https://launchpad.net/~mdeslaur/+archive/ubuntu/testing Once it's finished building, could someone please check if the package resolves their issue? If so, I'll upload it to

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

This patch was exposed by: "also_check_sudo_group.diff" (since user was in "sudo" group and should have stopped user_in_group before) Right after being caused by: commit a1663632dc5ab7e7c01e17206854b6f0ba0347dd Author: Todd C. Miller Date: Fri Jan 22 17:04:59 2016

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

(3) Unfortunately this was caused by patch: "also_check_sudo_group.diff" Description: also check the sudo group to create the admin flag file Author: Marc Deslauriers Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1387347 Updated: 2016-03-30 --

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Following execution path I get: (1) mode_run -> policy_check -> sudoers_policy_main -> sudoers_policy_init: - init_vars (fills global variable sudo_user) - sudo_user->pwd (from global struct passwd) will be used in "user_in_group" as "struct passwd" of executing user - it will check

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

(2) Going back to backtrace we have: mode_run -> policy_check -> sudoers_policy_main - >create_admin_success_flag -> user_in_group (global sudo_user) /* Check whether the user is in the admin group. */ if (!user_in_group(sudo_user.pw, "admin") && !user_in_group(sudo_user.pw,

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

It was brought to my attention a crash just like this one. Here is my analsysis: ## INTRODUCTION # From plugins/sudoers/pwutil.c: /* * Get a password entry by uid and allocate space for it. */ struct passwd * sudo_getpwuid(uid_t uid) { struct cache_item key, *item; struct rbnode

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Summary: Users coming from LDAP in groups ADMIN or SUDO will experience this problem. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/1565567 Title: segv in sudo_getgrgid

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

The segmentation fault[1] is due to a NULL pointer dereference[2] at : sudo-1.8.16/plugins/sudoers/pwutil.c[3] [1] Core was generated by `sudo bash'. Program terminated with signal SIGSEGV, Segmentation fault. #0 0x7fa01c0a6944 in sudo_getgrgid (gid=7241) at

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

Status changed to 'Confirmed' because the bug affects multiple users. ** Changed in: sudo (Ubuntu) Status: New => Confirmed -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu.

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

** Tags added: xenial ** Changed in: sudo (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/1565567 Title: segv in sudo_getgrgid

[Touch-packages] [Bug 1565567] Re: segv in sudo_getgrgid

this is with current xenial (1.8.16-0ubuntu1) -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to sudo in Ubuntu. https://bugs.launchpad.net/bugs/1565567 Title: segv in sudo_getgrgid Status in sudo package in Ubuntu: New