High ELSA-2023-0282 1 CVE

Important: sudo security update (Oracle Linux 9)

Published Jan 23, 2023 · Updated Jan 23, 2023

Ecosystem: Oracle Linux

Summary

[1.9.5p2-7.1]
RHEL 9.1.0.Z ERRATUM
- CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
Resolves: rhbz#2161224

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	sudo	0:1.9.5p2-7.el9_1.1
Oracle Linux · 9	sudo-python-plugin	0:1.9.5p2-7.el9_1.1

Vulnerabilities 1

High 7.8

CVE-2023-22809 Public exploit EPSS 55%

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

sudo sudo sudo sudo Debian Ubuntu Azure Linux Alpine

Jan 18, 2023