1 |
Summary: Allows restricted root access for specified users |
Summary: Allows restricted root access for specified users |
2 |
Name: sudo |
Name: sudo |
3 |
Version: 1.8.6p3 |
Version: 1.8.6p3 |
4 |
Release: 29%{?dist} |
Release: 30%{?dist} |
5 |
License: ISC |
License: ISC |
6 |
Group: Applications/System |
Group: Applications/System |
7 |
URL: http://www.courtesan.com/sudo/ |
URL: http://www.courtesan.com/sudo/ |
142 |
Patch56: sudo-1.8.6p3-tty-parsing.patch |
Patch56: sudo-1.8.6p3-tty-parsing.patch |
143 |
# 1459408 - CVE-2017-1000368 sudo: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367) [rhel-6.9.z] |
# 1459408 - CVE-2017-1000368 sudo: Privilege escalation via improper get_process_ttyname() parsing (insufficient fix for CVE-2017-1000367) [rhel-6.9.z] |
144 |
Patch57: sudo-1.8.6p7-CVE-2017-1000368.patch |
Patch57: sudo-1.8.6p7-CVE-2017-1000368.patch |
145 |
|
# 1917729 - EMBARGOED CVE-2021-3156 sudo: Heap-buffer overflow in argument parsing [rhel-7.9.z] |
146 |
|
Patch58: sudo-1.8.6p3-CVE-2021-3156.patch |
147 |
|
|
148 |
%description |
%description |
149 |
Sudo (superuser do) allows a system administrator to give certain |
Sudo (superuser do) allows a system administrator to give certain |
225 |
%patch55 -p1 -b .noexec-update |
%patch55 -p1 -b .noexec-update |
226 |
%patch56 -p1 -b .tty-parsing |
%patch56 -p1 -b .tty-parsing |
227 |
%patch57 -p1 -b .CVE-2017-1000368 |
%patch57 -p1 -b .CVE-2017-1000368 |
228 |
|
%patch58 -p1 -b .heap-buffer |
229 |
|
|
230 |
%build |
%build |
231 |
autoreconf -I m4 -fv --install |
autoreconf -I m4 -fv --install |
342 |
%{_mandir}/man8/sudo_plugin.8* |
%{_mandir}/man8/sudo_plugin.8* |
343 |
|
|
344 |
%changelog |
%changelog |
345 |
|
* Thu Feb 04 2021 Jean-Philipe Pialasse <tests@pialasse.com> 1.8.6p3-30.sme |
346 |
|
- fix CVE-2021-3156 [SME: 11339] |
347 |
|
|
348 |
* Wed Jun 07 2017 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-29 |
* Wed Jun 07 2017 Daniel Kopecek <dkopecek@redhat.com> - 1.8.6p3-29 |
349 |
- Fixes CVE-2017-1000368 |
- Fixes CVE-2017-1000368 |
350 |
Resolves: rhbz#1459408 |
Resolves: rhbz#1459408 |