Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0834-1

Опубликовано: 11 мар. 2024
Источник: suse-cvrf

Описание

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).

Fixed issues introduced by first patches for CVE-2023-42465 (bsc#1220389).

Список пакетов

Container suse/sle-micro-rancher/5.2:latest
sudo-1.9.5p2-150300.3.33.1
Container suse/sle-micro/5.1/toolbox:latest
sudo-1.9.5p2-150300.3.33.1
Container suse/sle-micro/5.2/toolbox:latest
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-CHOST-BYOS-Aliyun
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-CHOST-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-CHOST-BYOS-EC2
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-CHOST-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-CHOST-BYOS-SAP-CCloud
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-HPC-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-HPC-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-HPC-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-1-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-1-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-1-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-2-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-2-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-Micro-5-2-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAP-Azure-LI-BYOS-Production
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAP-Azure-VLI-BYOS-Production
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAP-BYOS-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAP-BYOS-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAP-BYOS-GCE
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAPCAL-Azure
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAPCAL-EC2-HVM
sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-SAPCAL-GCE
sudo-1.9.5p2-150300.3.33.1
SUSE Enterprise Storage 7.1
sudo-1.9.5p2-150300.3.33.1
sudo-devel-1.9.5p2-150300.3.33.1
sudo-plugin-python-1.9.5p2-150300.3.33.1
SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS
sudo-1.9.5p2-150300.3.33.1
sudo-devel-1.9.5p2-150300.3.33.1
sudo-plugin-python-1.9.5p2-150300.3.33.1
SUSE Linux Enterprise Micro 5.1
sudo-1.9.5p2-150300.3.33.1
SUSE Linux Enterprise Micro 5.2
sudo-1.9.5p2-150300.3.33.1
SUSE Linux Enterprise Server 15 SP3-LTSS
sudo-1.9.5p2-150300.3.33.1
sudo-devel-1.9.5p2-150300.3.33.1
sudo-plugin-python-1.9.5p2-150300.3.33.1
SUSE Linux Enterprise Server for SAP Applications 15 SP3
sudo-1.9.5p2-150300.3.33.1
sudo-devel-1.9.5p2-150300.3.33.1
sudo-plugin-python-1.9.5p2-150300.3.33.1

Ссылки

Описание

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Затронутые продукты
Container suse/sle-micro-rancher/5.2:latest:sudo-1.9.5p2-150300.3.33.1
Container suse/sle-micro/5.1/toolbox:latest:sudo-1.9.5p2-150300.3.33.1
Container suse/sle-micro/5.2/toolbox:latest:sudo-1.9.5p2-150300.3.33.1
Image SLES15-SP3-BYOS-Azure:sudo-1.9.5p2-150300.3.33.1
Ссылки
Уязвимость SUSE-SU-2024:0834-1