CVE-2021-3156: Heap-Based Buffer Overflow in Sudo

This page summarizes the projects mentioned and recommended in the original post on news.ycombinator.com

InfluxDB - Power Real-Time Data Analytics at Scale
Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.
www.influxdata.com
featured
SaaSHub - Software Alternatives and Reviews
SaaSHub helps you find the best software and product alternatives
www.saashub.com
featured
  • cosmopolitan

    build-once run-anywhere c library

  • OpenBSD is a fabulous project. I've been working on tool called Cosmopolitan which helps Mac/Linux/Windows/FreeBSD developers write software that's compatible with OpenBSD: https://github.com/jart/cosmopolitan/blob/master/libc/sysv/s... So basically I've studied these systems a lot and I've got to say that OpenBSD is the closest to the Bell Labs roots I've seen from community distros. It takes a certain degree of judiciousness to maintain that authenticity. Their clairvoyance w.r.t sudo should be all the proof we need the OpenBSD devs are up to something good.

  • systemd

    The systemd System and Service Manager

  • PAM is fun. https://github.com/systemd/systemd/issues/16813

    With all the .so modules loading into some process, etc. Some questionable design in sshd makes it lock up completely for all incoming connections when used with PAM and when pam module ends up in infinite loop.

    Nevermind that systemd pam modules pull in a shitton of stuff, including dbus, into any process that tries to use PAM for auth, these days.

  • InfluxDB

    Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

    InfluxDB logo
  • sudo

    Utility to execute a command as another user

  • We’d all like that, true, but look here:

    https://github.com/sudo-project/sudo/graphs/contributors

    That’s one maintainer, not even full time according to his résumé. What you just described is multiple specialists and some supporting tools, so another way of looking at this is to ask how much value the IT world has gotten from sudo but not contributed back in support.

  • ripgrep

    ripgrep recursively searches directories for a regex pattern while respecting your gitignore

  • Try https://github.com/BurntSushi/ripgrep – it’s across the board better, and one of the best personal productivity boosts you can make if you use grep frequently.

NOTE: The number of mentions on this list indicates mentions on common posts plus user suggested alternatives. Hence, a higher number means a more popular project.

Suggest a related project

Related posts

  • Faster way to get only specific posts/comments from the large dataset files

    2 projects | /r/pushshift | 22 Nov 2022
  • Supercharging Vim: Navigate files instantly

    2 projects | dev.to | 26 Apr 2021
  • 7 Tools I Use Every Day at Work

    2 projects | dev.to | 1 Apr 2021
  • Ripgrep

    1 project | news.ycombinator.com | 25 Feb 2024
  • RFC: Add ngram indexing support to ripgrep (2020)

    2 projects | news.ycombinator.com | 30 Nov 2023