< back to search

shield Security update for sudo
slessp4-sudo-12852

This update for sudo fixes the following issues: - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501] - The SSSD plugin would occasionally crash sudo with an "internal error". This issue has been fixed. [bsc#948973] - The SSSD plugin would occasionally apply @netgroups rules from LDAP to all users rather than the @netgroup. This issue is now fixed. [bsc#966755] - When the SSSD plugin was used and a local user ran sudo, an e-mail used to be sent to administrator because SSSD did not support sudo rules for local users. This message did not signify an error, however, it was only noise. [bsc#1008043]

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586
  • Packages
    sudo
    Execute some commands as root
    1.7.6p2-0.29.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP Applications 11.4 ppc64
  • Packages
    sudo
    Execute some commands as root
    1.7.6p2-0.29.1 lock rpm lock src
SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64
  • Packages
    sudo
    Execute some commands as root
    1.7.6p2-0.29.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 ia64
  • Packages
    sudo
    Execute some commands as root
    1.7.6p2-0.29.1 lock rpm lock src
SUSE Linux Enterprise Server 11.4 s390x
  • Packages
    sudo
    Execute some commands as root
    1.7.6p2-0.29.1 lock rpm lock src