< back to search

gpp_maybe Security update for sudo

SUSE-SLE-SAP-12-SP2-2021-232

This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit` [bsc#1180684,CVE-2021-23239]

Release Date

Jan 27 2021
References

Bugzilla: 1180684, 1181090
CVEs: CVE-2021-23239, CVE-2021-3156
Type

security
Severity

important

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

Packages

sudo
Execute some commands as root

1.8.10p3-10.29.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64

Packages

sudo
Execute some commands as root

1.8.10p3-10.29.1 lock rpm lock src