Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2024-0811

Опубликовано: 14 фев. 2024
Источник: oracle-oval
Платформа: Oracle Linux 8
Платформа: Oracle Linux 9

Описание

ELSA-2024-0811: sudo security update (MODERATE)

RHEL 9.3.0.Z ERRATUM [1.9.5p2-10]

  • CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834
  • CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21828
  • CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21821

RHEL 8.9.0.Z ERRATUM [1.9.5p2-1]

  • Rebase to 1.9.5p2
  • CVE-2023-28486 sudo: Sudo does not escape control characters in log messages Resolves: RHEL-21825
  • CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21831
  • CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables Resolves: RHEL-21820

Обновленные пакеты

Oracle Linux 8

Oracle Linux aarch64

sudo

1.9.5p2-1.el8_9

Oracle Linux x86_64

sudo

1.9.5p2-1.el8_9

Oracle Linux 9

Oracle Linux aarch64

sudo

1.9.5p2-10.el9_3

sudo-python-plugin

1.9.5p2-10.el9_3

Oracle Linux x86_64

sudo

1.9.5p2-10.el9_3

sudo-python-plugin

1.9.5p2-10.el9_3

Связанные уязвимости

suse-cvrf
около 2 лет назад

Security update for sudo

suse-cvrf
около 2 лет назад

Security update for sudo

suse-cvrf
около 2 лет назад

Security update for sudo

suse-cvrf
около 2 лет назад

Security update for sudo

suse-cvrf
около 2 лет назад

Security update for sudo