Red Hat Security Advisory: sudo security and bug fix update

Fixed packages 3

Vulnerabilities 2

• Unscored —
  CVE-2021-23239

  The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existe…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 12, 2021
• Unscored —
  CVE-2021-23240

  selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and e…

  sudo sudo sudo Debian Ubuntu Alpine
  Jan 12, 2021

References

• article
  https://access.redhat.com/security/updates/classification/#low
• article
  https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.4_release_notes/
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915052
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1915053
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1923825
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1723.json
• report
  https://access.redhat.com/security/cve/CVE-2021-23239
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23239
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23239
• article
  https://www.sudo.ws/stable.html#1.9.5
• report
  https://access.redhat.com/security/cve/CVE-2021-23240
• advisory
  https://www.cve.org/CVERecord?id=CVE-2021-23240
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2021-23240
• article
  https://www.sudo.ws/alerts/sudoedit_selinux.html