gpp_maybe Security update for sudo

SUSE-SLE-SAP-12-SP4-2022-4240

This update for sudo fixes the following issues: Security fixes: - CVE-2022-43995: Fixed a potential heap-based buffer over-read when entering a password of seven characters or fewer and using the crypt() password backend (bsc#1204986). Other: - Make sure SIGCHLD is not ignored when sudo is executed; fixes race condition (bsc#1203201). - Change sudo-ldap schema from ASCII to UTF8 (bsc#1197998).

• Release Date
  Nov 28 2022
• References
  Bugzilla: 1197998, 1204986, 1203201
  CVEs: CVE-2022-43995
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 ppc64le

• Packages
  sudo
  Execute some commands as root

  1.8.20p2-3.33.1 lock rpm lock src

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  sudo
  Execute some commands as root

  1.8.20p2-3.33.1 lock rpm lock src