| Revision Date: | 2017-05-30 | Version: | 636 |
| Title: | RHSA-2017:1381: sudo security update (Important) |
| Description: | The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. (CVE-2017-1000367)
Red Hat would like to thank Qualys Security for reporting this issue.
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | CVE-2017-1000367
RHSA-2017:1381
RHSA-2017:1381-01
|
| Platform(s): | Red Hat Enterprise Linux 5 Extended Lifecycle Support
| Product(s): | |
| Definition Synopsis |
| Red Hat Enterprise Linux must be installed OR Package Information
Red Hat Enterprise Linux 5 is installed
AND sudo is earlier than 0:1.7.2p1-30.el5_11
AND sudo is signed with Red Hat redhatrelease2 key
|