Skip to content
OpenAdvisories
Unscored RHSA-2020:1804 2 CVEs

Red Hat Security Advisory: sudo security, bug fix, and enhancement update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · RHEL 8 enterprise_linux:8::baseos sudo 0:1.8.29-5.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos sudo-debuginfo 0:1.8.29-5.el8
Red Hat · RHEL 8 enterprise_linux:8::baseos sudo-debugsource 0:1.8.29-5.el8

Vulnerabilities 2

  • Unscored —
    CVE-2019-19232

    In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by inv…

    sudo sudo Debian Ubuntu
  • Unscored —
    CVE-2019-19234

    In Sudo through 1.8.29, the fact that a user has been blocked (e.g., by using the ! character in the shadow file instea…

    sudo sudo Debian Ubuntu

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • article
    https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.2_release_notes/index
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1679508
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1715516
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1733961
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786704
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1796518
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1804.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-19232
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19232
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19232
  • article
    https://www.sudo.ws/stable.html#1.8.30
  • report
    https://access.redhat.com/security/cve/CVE-2019-19234
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1786708
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-19234
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-19234