macOS Big Sur 11.2.1 Fixes Root Access Sudo Bug
The macOS Big Sur 11.2.1 update that Apple released today fixes a sudo security vulnerability that could allow an attacker to gain root access to a Mac.
/article-new/2021/02/sudo-bug-macos.jpg?lossy)
According to an Apple security support document, the bug, CVE-2021-3156, was addressed in the update by updating to sudo version 1.9.5p2. Apple has also fixed the bug in Supplemental Updates made available for macOS Catalina 10.15.7 and macOS Mojave 10.14.6.
The updates also include fixes for two bugs that could allow an app to execute arbitrary code with kernel privileges.
Discovered last week, the vulnerability triggers a "heap overflow" in sudo that changes the current user's privileges to enable root-level access, giving an attacker access to the entire system.
Top Stories
Apple today seeded the first beta of an upcoming macOS Big Sur 11.4 update to developers for testing purposes, with the new beta coming while the macOS 11.3 beta is still in testing. Developers can download the macOS Big Sur 11.4 beta using the Software Update mechanism in System Preferences after installing the proper profile from the Apple Developer Center.
According...
A sudo bug that can grant an attacker root access has been discovered to affect macOS Big Sur (via ZDNet).
The security vulnerability, identified last week as "CVE-2021-3156" by the Qualys Security Team, affects sudo, which is a program that allows users to run commands with the security privileges of another user, such as an administrator. The bug triggers a "heap overflow" in sudo that...
Apple today seeded the RC version of an upcoming macOS Big Sur 11.2 update to developers for testing purposes, with the new beta coming a week after the second beta and two months after initial macOS Big Sur release.
Developers can download the macOS Big Sur 11.2 beta using the Software Update mechanism in System Preferences after installing the proper profile from the Apple...
Apple today released a new version of Safari 14.1 for macOS Catalina and macOS Mojave users, with the update introducing fixes for two WebKit vulnerabilities that were patched in macOS Big Sur yesterday.
Apple's support document for the updated Safari release confirms that it addresses the same WebKit memory corruption issue and an integer overflow bug for users of older versions of macOS. ...
Apple today released macOS Big Sur 11.2.1, the third update to the macOS Big Sur operating system that launched in November. macOS Big Sur 11.2.1 comes a little over a week after the release of macOS 11.2.
The new macOS Big Sur 11.2.1 update can be downloaded for free on all eligible Macs using the Software Update section of System Preferences.
According to Apple's...
Apple today seeded the seventh beta of an upcoming macOS Big Sur 11.3 update to developers for testing purposes, with the new beta coming one week after the launch of the sixth beta and more than a month after the release of macOS Big Sur 11.2, a bug fix update.
Developers can download the macOS Big Sur 11.3 beta using the Software Update mechanism in System Preferences after...
Apple today released macOS Big Sur 11.4, the fourth major update to the macOS Big Sur operating system that launched in November 2020. macOS Big Sur comes one month after the release of macOS Big Sur 11.3, an update that added M1 optimizations, AirTag integration, and more.
The new macOS Big Sur 11.4 update can be downloaded for free on all eligible Macs using the...
Apple today seeded the RC version of an upcoming macOS Big Sur 11.3 update to developers for testing purposes, with the new beta coming one week after the launch of the eighth beta and more than two months after the release of macOS Big Sur 11.2, a bug fix update.
Developers can download the macOS Big Sur 11.3 beta using the Software Update mechanism in System Preferences after...
Apple today seeded a third RC version of an upcoming macOS Big Sur 11.2 update to developers for testing purposes, with the new update coming a week after the second RC and more than two months after initial macOS Big Sur release.
Developers can download the updated macOS Big Sur 11.2 release candidate using the Software Update mechanism in System Preferences after installing the ...
Apple today seeded the first public betas of iOS 14.7, iPadOS 14.7, and macOS Big Sur 11.5 to public beta testers, one day after seeding first betas to developers.
Public beta testers who have signed up for the beta testing program can download the iOS and iPadOS 14.7 updates over the air after installing the proper certificate from the Public Beta website on an iOS device. macOS Big Sur...
Top Rated Comments
Examples:
https://ubuntu.com/security/CVE-2021-3156
https://access.redhat.com/security/cve/cve-2021-3156
https://www.suse.com/security/cve/CVE-2021-3156/
https://bodhi.fedoraproject.org/updates/FEDORA-2021-2cb63d912a
https://derflounder.wordpress.com/2017/11/17/enabling-touch-id-authorization-for-sudo-on-macos-high-sierra/