sudo-1.8.6p7-23.el7

エラータID: AXSA:2017-1708:02

Release date: 
Monday, June 26, 2017 - 18:45
Subject: 
sudo-1.8.6p7-23.el7
Affected Channels: 
Asianux Server 7 for x86_64
Severity: 
Moderate
Description: 

Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.

Security issues fixed with this release:

CVE-2017-1000368
Todd Miller's sudo version 1.8.20p1 and earlier is vulnerable to an
input validation (embedded newlines) in the get_process_ttyname()
function resulting in information disclosure and command execution.

Solution: 

Update packages.

Additional Info: 

N/A

Download: 

SRPMS
  1. sudo-1.8.6p7-23.el7.src.rpm
    MD5: 046a63c7ad90f5720b2dbd86c3c84866
    SHA-256: dcaacd4df448318a3e39dae7cc943fef399d51640e883db24d3f39c235574c10
    Size: 1.96 MB

Asianux Server 7 for x86_64
  1. sudo-1.8.6p7-23.el7.x86_64.rpm
    MD5: a29457dcb130ee34396b16f25b1da3f4
    SHA-256: af80fae2b2e1a031fec3fdd41bf7b6cd46bfd2cc666bac8c5f047db50652e1d7
    Size: 734.31 kB