Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0876-1

Опубликовано: 13 мар. 2024
Источник: suse-cvrf

Описание

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).

Список пакетов

Container suse/sle-micro/5.5/toolbox:latest
sudo-1.9.12p1-150500.7.10.1
Container suse/sle-micro/5.5:latest
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Azure-3P
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Azure-Basic
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Azure-Standard
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-Aliyun
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-GDC
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-CHOST-BYOS-SAP-CCloud
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-HPC-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-HPC-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-HPC-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-HPC-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Hardened-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Hardened-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Hardened-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-Azure-llc
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-Azure-ltd
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-BYOS
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-EC2-llc
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Manager-Server-5-0-EC2-ltd
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-BYOS
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Micro-5-5-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Azure-3P
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Azure-LI-BYOS
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Azure-LI-BYOS-Production
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Hardened-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Hardened-BYOS-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Hardened-BYOS-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Hardened-BYOS-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAP-Hardened-GCE
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAPCAL-Azure
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAPCAL-EC2
sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-SAPCAL-GCE
sudo-1.9.12p1-150500.7.10.1
SUSE Linux Enterprise Micro 5.5
sudo-1.9.12p1-150500.7.10.1
SUSE Linux Enterprise Module for Basesystem 15 SP5
sudo-1.9.12p1-150500.7.10.1
sudo-devel-1.9.12p1-150500.7.10.1
sudo-plugin-python-1.9.12p1-150500.7.10.1
openSUSE Leap 15.5
sudo-1.9.12p1-150500.7.10.1
sudo-devel-1.9.12p1-150500.7.10.1
sudo-plugin-python-1.9.12p1-150500.7.10.1
sudo-test-1.9.12p1-150500.7.10.1

Ссылки

Описание

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Затронутые продукты
Container suse/sle-micro/5.5/toolbox:latest:sudo-1.9.12p1-150500.7.10.1
Container suse/sle-micro/5.5:latest:sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Azure-3P:sudo-1.9.12p1-150500.7.10.1
Image SLES15-SP5-Azure-Basic:sudo-1.9.12p1-150500.7.10.1
Ссылки
Уязвимость SUSE-SU-2024:0876-1