Skip to content
OpenAdvisories
Medium ELSA-2020-1804 1 CVE

Moderate: sudo security, bug fix, and enhancement update (Oracle Linux 8)

Published May 5, 2020 · Updated May 5, 2020

Ecosystem: Oracle Linux

Summary

[1.8.29-5]
- RHEL 8.2 ERRATUM
- CVE-2019-18634
Resolves: rhbz#1798093

[1.8.29-4]
- RHEL 8.2 ERRATUM
- CVE-2019-19232
Resolves: rhbz#1786987
Resolves: rhbz#1796518

[1.8.29-2]
- RHEL 8.2 ERRATUM
- rebase to 1.8.29
Resolves: rhbz#1733961
Resolves: rhbz#1651662

[1.8.28p1-1]
- RHEL 8.2 ERRATUM
- rebase to 1.8.28p1
Resolves: rhbz#1733961
- fixed man page for always_set_home
Resolves: rhbz#1576880
- sudo does not work with notbefore/after
Resolves: rhbz#1679508
- NOTBEFORE showing value of sudoNotAfter Ldap attribute
Resolves: rhbz#1715516
- CVE-2019-14287 sudo
- Privilege escalation via 'Runas' specification with 'ALL' keyword
Resolves: rhbz#1760697

Fixed packages 1

ReleasePackageFixed in
Oracle Linux · 8 sudo 0:1.8.29-5.el8

Vulnerabilities 1

  • Unscored —
    CVE-2019-19232

    In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by inv…

    sudo sudo Debian Ubuntu