ELSA-2021-1723 — Low: sudo security and bug fix update (Oracle Linux 8)

Summary

[1.8.29-7]
- RHEL 8.4 ERRATUM
- CVE-2021-3156
Resolves: rhbz#1917734
- CVE-2021-23239 sudo: possible directory existence test due to race condition in sudoedit
Resolves: rhzb#1916434
- CVE-2021-23240 sudo: symbolic link attack in SELinux-enabled sudoedit
Resolves: rhbz#1917038
- updated upstream url
Resolves: rhbz#1923825

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	sudo	0:1.8.29-7.el8

Vulnerabilities 2

Unscored —

CVE-2021-23239

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…

sudo sudo sudo Debian Ubuntu Alpine

Jan 12, 2021
Unscored —

CVE-2021-23240

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and e…

sudo sudo sudo Debian Ubuntu Alpine

Jan 12, 2021

Low: sudo security and bug fix update (Oracle Linux 8)

Summary

Fixed packages 1

Vulnerabilities 2

The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…

selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and e…