High ELSA-2023-0284 1 CVE

Important: sudo security update (Oracle Linux 8)

Published Jan 23, 2023 · Updated Jan 23, 2023

Ecosystem: Oracle Linux

Summary

[1.8.29.8.1]
RHEL 8.7.0.Z ERRATUM
- CVE-2023-22809 sudo: arbitrary file write with privileges of the RunAs user
Resolves: rhbz#2161220

Fixed packages 1

Release	Package	Fixed in
Oracle Linux · 8	sudo	0:1.8.29-8.el8_7.1

Vulnerabilities 1

High 7.8

CVE-2023-22809 Public exploit EPSS 55%

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environme…

sudo sudo sudo sudo Debian Ubuntu Azure Linux Alpine

Jan 18, 2023