[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249982

 
 

909

 
 

195748

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

SUSE-SU-2016:2891-1 -- SLES sudo

ID: oval:org.secpod.oval:def:89045125Date: (C)2021-08-03   (M)2022-04-18
Class: PATCHFamily: unix




This update for sudo fixes the following issues: - Fix two security vulnerabilities that allowed users to bypass sudo"s NOEXEC functionality: * noexec bypass via system and popen [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp [CVE-2016-7076, bsc#1007501] - The SSSD plugin would occasionally crash sudo with an internal error. This issue has been fixed. [bsc#948973] - The SSSD plugin would occasionally apply @netgroups rules from LDAP to all users rather than the @netgroup. This issue is now fixed. [bsc#966755] - When the SSSD plugin was used and a local user ran sudo, an e-mail used to be sent to administrator because SSSD did not support sudo rules for local users. This message did not signify an error, however, it was only noise. [bsc#1008043]

Platform:
SUSE Linux Enterprise Server 11 SP4
Product:
sudo
Reference:
SUSE-SU-2016:2891-1
CVE-2016-7032
CVE-2016-7076
CVE    2
CVE-2016-7032
CVE-2016-7076
CPE    21
cpe:/a:todd_miller:sudo:1.6.8
cpe:/a:todd_miller:sudo:1.7.7
cpe:/a:todd_miller:sudo:1.8.6
cpe:/a:todd_miller:sudo:1.7.6
...

© SecPod Technologies