<div dir="ltr"><div dir="ltr"><div class="gmail_default" style="font-family:arial,helvetica,sans-serif;font-size:small"><br></div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Thu, Jan 28, 2021 at 12:19 PM Till Wegmueller <<a href="mailto:toasterson@gmail.com">toasterson@gmail.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">Yeah<br>
<br>
People still don't inform us or the BSD's / Apple properly for these <br>
sorts of things, but we can scramble to address small patches like this <br>
very fast it turns out. Thankfully now a couple of people in the BSD's <br>
now ping us in tweets when this happens so we get the news very fast, <br>
although still post embargo and not pre.<br></blockquote><div><br></div><div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">And following Alan's notification you may want to update the sudo package on your systems again:</div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><a href="https://github.com/OpenIndiana/oi-userland/pull/6468">https://github.com/OpenIndiana/oi-userland/pull/6468</a></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default"><br></div><div style="font-family:arial,helvetica,sans-serif;font-size:small" class="gmail_default">The new package has been published already.<br></div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<br>
<br>
-Till<br>
<br>
On 28.01.21 04:36, Tony Brian Albers wrote:<br>
> On 01/28/21 07:14 AM, Tim Mooney via oi-dev wrote:<br>
>> In regard to: [oi-dev] CVE-2021-3156 seems relevant for OI, Tony Brian...:<br>
>><br>
>>> We might want to get sudo patched really, really quickly.<br>
>><br>
>> Rich Lowe had a PR for it last night, just a few hours after the<br>
>> embargo lifted:<br>
>><br>
>>       <a href="https://github.com/OpenIndiana/oi-userland/pull/6456" rel="noreferrer" target="_blank">https://github.com/OpenIndiana/oi-userland/pull/6456</a><br>
>><br>
>> Tim<br>
> <br>
> Cool, that's what I call fast :)<br>
> <br>
> /tony<br>
> <br>
> <br>
> <br>
<br>
_______________________________________________<br>
oi-dev mailing list<br>
<a href="mailto:oi-dev@openindiana.org" target="_blank">oi-dev@openindiana.org</a><br>
<a href="https://openindiana.org/mailman/listinfo/oi-dev" rel="noreferrer" target="_blank">https://openindiana.org/mailman/listinfo/oi-dev</a><br>
</blockquote></div><br clear="all"><br>-- <br><div dir="ltr" class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><font style="font-family:courier new,monospace" size="1">---<br>Praise the Caffeine embeddings<br></font></div></div></div></div></div>