shield Security update for sudo

SUSE-SUSE-MicroOS-5.2-2023-1698

This update for sudo fixes the following issue: Security fixes: - CVE-2023-28486: Fixed missing control characters escaping in log messages (bsc#1209362). - CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output (bsc#1209361). Other fixes: - Fix a situation where "sudo -U otheruser -l" would dereference a NULL pointer (bsc#1206483). - Do not re-enable the reader when flushing the buffers as part of pty_finish() (bsc#1203201).

• Release Date
  Mar 30 2023
• References
  Bugzilla: 1203201, 1206483, 1209362, 1209361
  CVEs: CVE-2023-28486, CVE-2023-28487
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Micro for Rancher 5.2 x86_64

• Packages
  sudo
  Execute some commands as root

  1.9.5p2-150300.3.24.1 lock rpm lock src

SUSE Linux Enterprise Micro for Rancher 5.2 aarch64

• Packages
  sudo
  Execute some commands as root

  1.9.5p2-150300.3.24.1 lock rpm lock src

SUSE Linux Enterprise Micro 5.2 s390x

• Packages
  sudo
  Execute some commands as root

  1.9.5p2-150300.3.24.1 lock rpm lock src