Oval Definition:oval:com.redhat.rhsa:def:20171574
Revision Date:2017-06-22Version:639
Title:RHSA-2017:1574: sudo security update (Moderate)
Description:The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • It was found that the original fix for CVE-2017-1000367 was incomplete. A flaw was found in the way sudo parsed tty information from the process status file in the proc filesystem. A local user with privileges to execute commands via sudo could use this flaw to escalate their privileges to root. (CVE-2017-1000368)
  • Family:unixClass:patch
    Status:Reference(s):CVE-2017-1000368
    RHSA-2017:1574
    RHSA-2017:1574-00
    RHSA-2017:1574-01
    Platform(s):Red Hat Enterprise Linux 5 Extended Lifecycle Support
    Red Hat Enterprise Linux 6
    Red Hat Enterprise Linux 7
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 7 is installed
  • AND
  • sudo is earlier than 0:1.8.6p7-23.el7_3
  • AND sudo is signed with Red Hat redhatrelease2 key
  • sudo-devel is earlier than 0:1.8.6p7-23.el7_3
  • AND sudo-devel is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 6 is installed
  • AND
  • sudo is earlier than 0:1.8.6p3-29.el6_9
  • AND sudo is signed with Red Hat redhatrelease2 key
  • sudo-devel is earlier than 0:1.8.6p3-29.el6_9
  • AND sudo-devel is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 5 is installed
  • AND sudo is earlier than 0:1.7.2p1-31.el5_11
  • AND sudo is signed with Red Hat redhatrelease2 key
  • Definition Synopsis
  • Release Information
  • Red Hat Enterprise Linux 7 Client is installed
  • OR Red Hat Enterprise Linux 7 Server is installed
  • OR Red Hat Enterprise Linux 7 Workstation is installed
  • OR Red Hat Enterprise Linux 7 ComputeNode is installed
  • AND
  • sudo is earlier than 0:1.8.6p7-23.el7_3
  • AND sudo is signed with Red Hat redhatrelease2 key
  • sudo-devel is earlier than 0:1.8.6p7-23.el7_3
  • AND sudo-devel is signed with Red Hat redhatrelease2 key
  • OR Package Information
  • Red Hat Enterprise Linux 6 Client is installed
  • OR Red Hat Enterprise Linux 6 Server is installed
  • OR Red Hat Enterprise Linux 6 Workstation is installed
  • OR Red Hat Enterprise Linux 6 ComputeNode is installed
  • AND
  • sudo is earlier than 0:1.8.6p3-29.el6_9
  • AND sudo is signed with Red Hat redhatrelease2 key
  • sudo-devel is earlier than 0:1.8.6p3-29.el6_9
  • AND sudo-devel is signed with Red Hat redhatrelease2 key
  • BACK