gpp_maybe Security update for sudo

SUSE-SLE-SERVER-12-SP2-2017-1002

This update for sudo fixes the following security issue: - CVE-2017-1000368: A follow-up fix to CVE-2017-1000367, the Linux process name could also contain a newline, which could be used to trick sudo to read/write to an arbitrary open terminal. (bsc#1042146) Also the following non security bug was fixed: - Link the "system_group" plugin with sudo_util library to resolve the missing sudo_dso_findsym symbol (bsc#1034560)

• Release Date
  Jun 20 2017
• References
  Bugzilla: 1042146, 1034560
  CVEs: CVE-2017-1000368
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.2 ppc64le

• Packages
  sudo
  Execute some commands as root

  1.8.10p3-10.10.2 lock rpm lock src

SUSE Linux Enterprise Server 12.2 aarch64

• Packages
  sudo
  Execute some commands as root

  1.8.10p3-10.10.2 lock rpm lock src

SUSE Linux Enterprise Server 12.2 s390x

• Packages
  sudo
  Execute some commands as root

  1.8.10p3-10.10.2 lock rpm lock src

SUSE Linux Enterprise Server 12.2 x86_64

• Packages
  sudo
  Execute some commands as root

  1.8.10p3-10.10.2 lock rpm lock src