Red Hat Security Advisory

RHSA-2014:0266

sudo security update

Released 2014-03-10 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) sudo-1.7.2p1-29.el5_10, sudo-1.7.2p1-29.el5_10.i386, sudo-1.7.2p1-29.el5_10.ia64 +1
Red Hat Enterprise Linux Desktop (v. 5 client) sudo-1.7.2p1-29.el5_10, sudo-1.7.2p1-29.el5_10.i386

Fixes 1 record

TI-2014-00101 CVE-2014-0106 · GHSA-cxvm-3g7g-7vv7

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment…

LOW 29

Sudo 1.6.9 before 1.8.5, when env_reset is disabled, does not properly check environment variables for the env_delete restriction, which allows local users with sudo permissions to bypass intended command restrictions vi…

CVSS 2.0MEDIUM 6.6 Local Low privileges Interaction — EPSS 0.00338 Published 2014-03-11 Fixed CWE-20