Skip to content
OpenAdvisories
High ALAS2-2024-2473 0 CVEs

Important: sudo security update (Amazon Linux 2)

Published Feb 22, 2024 · Updated Jun 6, 2024

Summary

Package updates are available for Amazon Linux 2 that fix the following vulnerabilities: CVE-2024-31969: In sudo-1.8.23-10.amzn2.3.6 (Amazon Linux 2) and sudo-1.8.23-10.58.amzn1 (Amazon Linux 1), a user with an entry in the sudoers file, enabling them to run commands as another unprivileged user, can leverage it to run commands as root. No prior versions are affected. This issue has been fixed in sudo-1.8.23-10.amzn2.3.7 (AL2) and sudo-1.8.23-10.59.amzn1 (AL1).

Fixed packages 3

ReleasePackageFixed in
Amazon Linux · 2 sudo 0:1.8.23-10.amzn2.3.7
Amazon Linux · 2 sudo-debuginfo 0:1.8.23-10.amzn2.3.7
Amazon Linux · 2 sudo-devel 0:1.8.23-10.amzn2.3.7

References

  • web
    https://alas.aws.amazon.com/cve/html/CVE-2024-31969.html