Описание
Security update for sudo
This update for sudo fixes the following issue:
Security fixes:
- CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362).
- CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361).
Other fixes:
- Fix a situation where 'sudo -U otheruser -l' would dereference a NULL pointer (bsc#1206483).
- Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).
Список пакетов
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production
sudo-1.8.27-150000.4.43.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-BYOS-Azure
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-HPC-BYOS-Azure
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-Azure
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-BYOS-Azure
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-BYOS-EC2-HVM
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-BYOS-GCE
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-EC2-HVM
sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-SAP-GCE
sudo-1.8.27-150000.4.43.1
SUSE Enterprise Storage 7
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise Server 15 SP1-LTSS
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise Server 15 SP2-LTSS
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise Server for SAP Applications 15 SP1
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
sudo-1.8.27-150000.4.43.1
sudo-devel-1.8.27-150000.4.43.1
Ссылки
- Link for SUSE-SU-2023:1699-1
- E-Mail link for SUSE-SU-2023:1699-1
- SUSE Security Ratings
- SUSE Bug 1203201
- SUSE Bug 1206483
- SUSE Bug 1209361
- SUSE Bug 1209362
- SUSE CVE CVE-2023-28486 page
- SUSE CVE CVE-2023-28487 page
Описание
Sudo before 1.9.13 does not escape control characters in log messages.
Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:sudo-1.8.27-150000.4.43.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-BYOS-Azure:sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-HPC-BYOS-Azure:sudo-1.8.27-150000.4.43.1
Ссылки
- CVE-2023-28486
- SUSE Bug 1209362
Описание
Sudo before 1.9.13 does not escape control characters in sudoreplay output.
Затронутые продукты
Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:sudo-1.8.27-150000.4.43.1
Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-BYOS-Azure:sudo-1.8.27-150000.4.43.1
Image SLES15-SP2-HPC-BYOS-Azure:sudo-1.8.27-150000.4.43.1
Ссылки
- CVE-2023-28487
- SUSE Bug 1209361