ELSA-2019-4821

ELSA-2019-4821 - sudo security update

Type:	SECURITY
Severity:	IMPORTANT
Release Date:	2019-10-15

Description

[1.8.23-4.0.1]
- Treat an ID of -1 as invalid since that means 'no change' [Orabug: 30421281] {CVE-2019-14287}
- Add sudo_strtoid() tests for -1 and range errors. [Orabug: 30421281]

Related CVEs

CVE-2019-14287

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 7 (aarch64)	sudo-1.8.23-4.0.1.el7.src.rpm	d1c4142df37874041fc9c912b6038714	ELSA-2021-0221
	sudo-1.8.23-4.0.1.el7.aarch64.rpm	fa950c9729b396dfa067c6885fb7f248	ELSA-2021-0221
	sudo-devel-1.8.23-4.0.1.el7.aarch64.rpm	217e38379911ac6c801a52e63d400c84	ELSA-2021-0221
Oracle Linux 7 (x86_64)	sudo-1.8.23-4.0.1.el7.src.rpm	d1c4142df37874041fc9c912b6038714	ELSA-2021-0221
	sudo-1.8.23-4.0.1.el7.x86_64.rpm	376a9410e15cf4d8849affe7c1bfd51d	ELSA-2021-0221
	sudo-devel-1.8.23-4.0.1.el7.i686.rpm	e9aa428af611301fd6d67bac3b36fc1b	ELSA-2021-0221
	sudo-devel-1.8.23-4.0.1.el7.x86_64.rpm	6933da0b1a3503e03d91fd0bee69992e	ELSA-2021-0221

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team