Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2024:0889-1

Опубликовано: 14 мар. 2024
Источник: suse-cvrf

Описание

Security update for sudo

This update for sudo fixes the following issues:

  • CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134).

Список пакетов

Image SLES15-SP2-SAP-Azure-LI-BYOS-Production
sudo-1.8.27-150000.4.53.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production
sudo-1.8.27-150000.4.53.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS
sudo-1.8.27-150000.4.53.1
sudo-devel-1.8.27-150000.4.53.1
SUSE Linux Enterprise Server 15 SP2-LTSS
sudo-1.8.27-150000.4.53.1
sudo-devel-1.8.27-150000.4.53.1
SUSE Linux Enterprise Server for SAP Applications 15 SP2
sudo-1.8.27-150000.4.53.1
sudo-devel-1.8.27-150000.4.53.1

Ссылки

Описание

Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit.

Затронутые продукты
Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:sudo-1.8.27-150000.4.53.1
Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:sudo-1.8.27-150000.4.53.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:sudo-1.8.27-150000.4.53.1
SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:sudo-devel-1.8.27-150000.4.53.1
Ссылки