ELSA-2016-2593

ELSA-2016-2593 - sudo security, bug fix, and enhancement update

Type:	SECURITY
Impact:	LOW
Release Date:	2016-11-09

Description

[1.8.6p7-20]
- RHEL 7.3 erratum
- fixed visudo's -q flag
Resolves: rhbz#1350828

[1.8.6p7-19]
- RHEL 7.3 erratum
- removed INPUTRC from env_keep to prevent a potential info leak
Resolves: rhbz#1340700

[1.8.6p7-18]
- RHEL 7.3 erratum
- removed requiretty flag from the default sudoers policy
- backported pam_service and pam_login_service defaults options
- implemented netgroup_tuple defaults option for changing netgroup
processing semantics
- fixed user matching logic in the LDAP nss backend
- don't allow visudo to accept an invalid sudoers file
- fixed a bug causing that non-root users can list privileges of
other users
- modified digest check documentation to mention the raciness of
the checking mechanism
Resolves: rhbz#1196451
Resolves: rhbz#1247230
Resolves: rhbz#1334331
Resolves: rhbz#1334360
Resolves: rhbz#1261998
Resolves: rhbz#1313364
Resolves: rhbz#1312486
Resolves: rhbz#1268958
Resolves: rhbz#1335039
Resolves: rhbz#1335042
Resolves: rhbz#1335045
Resolves: rhbz#1273243
Resolves: rhbz#1299883

Related CVEs

CVE-2016-7091

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 7 (x86_64)	sudo-1.8.6p7-20.el7.src.rpm	27d3097c230ee8d53957f1af0a9505f4d2f3cb265595933ecdb3738078f01238	ELSA-2023-0291	ol7_x86_64_latest_archive
	sudo-1.8.6p7-20.el7.src.rpm	27d3097c230ee8d53957f1af0a9505f4d2f3cb265595933ecdb3738078f01238	ELSA-2023-0291	ol7_x86_64_optional_archive
	sudo-1.8.6p7-20.el7.src.rpm	27d3097c230ee8d53957f1af0a9505f4d2f3cb265595933ecdb3738078f01238	ELSA-2023-0291	ol7_x86_64_u3_base
	sudo-1.8.6p7-20.el7.x86_64.rpm	2619dacc1aa8e2f034b3b8eb5f8fc19ad71562dd0eca8126241c773712bc9b02	ELSA-2023-0291	ol7_x86_64_latest_archive
	sudo-1.8.6p7-20.el7.x86_64.rpm	2619dacc1aa8e2f034b3b8eb5f8fc19ad71562dd0eca8126241c773712bc9b02	ELSA-2023-0291	ol7_x86_64_u3_base
	sudo-devel-1.8.6p7-20.el7.i686.rpm	155ff85f89cc85256bfc72ecaaee65327f85e03759880bdb4ddd74ae4394184a	ELSA-2023-0291	ol7_x86_64_optional_archive
	sudo-devel-1.8.6p7-20.el7.x86_64.rpm	36755444df7a1fd93cdab371a10bbeff83fe62161f9d839448bbb140a361330a	ELSA-2023-0291	ol7_x86_64_optional_archive

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team