ELSA-2020-1804

ELSA-2020-1804 - sudo security, bug fix, and enhancement update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2020-05-05

Description

[1.8.29-5]
- RHEL 8.2 ERRATUM
- CVE-2019-18634
Resolves: rhbz#1798093

[1.8.29-4]
- RHEL 8.2 ERRATUM
- CVE-2019-19232
Resolves: rhbz#1786987
Resolves: rhbz#1796518

[1.8.29-2]
- RHEL 8.2 ERRATUM
- rebase to 1.8.29
Resolves: rhbz#1733961
Resolves: rhbz#1651662

[1.8.28p1-1]
- RHEL 8.2 ERRATUM
- rebase to 1.8.28p1
Resolves: rhbz#1733961
- fixed man page for always_set_home
Resolves: rhbz#1576880
- sudo does not work with notbefore/after
Resolves: rhbz#1679508
- NOTBEFORE showing value of sudoNotAfter Ldap attribute
Resolves: rhbz#1715516
- CVE-2019-14287 sudo
- Privilege escalation via 'Runas' specification with 'ALL' keyword
Resolves: rhbz#1760697

Related CVEs

CVE-2019-19232

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory
Oracle Linux 8 (aarch64)	sudo-1.8.29-5.el8.src.rpm	f3a52b824128c1008760f2e4cde7e582	-
	sudo-1.8.29-5.el8.aarch64.rpm	8eff64763d18df25e957e1406ac61805	-
Oracle Linux 8 (x86_64)	sudo-1.8.29-5.el8.src.rpm	f3a52b824128c1008760f2e4cde7e582	-
	sudo-1.8.29-5.el8.x86_64.rpm	839fce95f65c9d4d40e08de2ac66d7b5	-

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team