< back to search

shield Security update for sudo

SUSE-SLE-SERVER-12-SP2-2016-1686

This update for sudo fixes the following issues: - fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501]

Release Date

Nov 23 2016
References

Bugzilla: 1007766, 1007501
CVEs: CVE-2016-7076, CVE-2016-7032
Type

security
Severity

moderate

cloud_download Downloads

To download packages, you need to log in and have a valid subscription.

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

Packages

sudo
Execute some commands as root

1.8.10p3-8.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 aarch64

Packages

sudo
Execute some commands as root

1.8.10p3-8.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 s390x

Packages

sudo
Execute some commands as root

1.8.10p3-8.1 lock rpm lock src

SUSE Linux Enterprise Server 12.2 x86_64

Packages

sudo
Execute some commands as root

1.8.10p3-8.1 lock rpm lock src