Red Hat Security AdvisoryRHSA-2015:1409
sudo security, bug fix, and enhancement update
Released 2015-07-20 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) sudo-1.8.6p3-19.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) sudo-devel-1.8.6p3-19.el6
- Red Hat Enterprise Linux HPC Node (v. 6) sudo-1.8.6p3-19.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) sudo-devel-1.8.6p3-19.el6
- Red Hat Enterprise Linux Server (v. 6) sudo-1.8.6p3-19.el6
- Red Hat Enterprise Linux Server Optional (v. 6) sudo-devel-1.8.6p3-19.el6, sudo-devel-1.8.6p3-19.el6.ppc
- Red Hat Enterprise Linux Workstation (v. 6) sudo-1.8.6p3-19.el6
- Red Hat Enterprise Linux Workstation Optional (v. 6) sudo-devel-1.8.6p3-19.el6
Fixes 1 record
Priority LOW 17
sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program w…
CVSS 3.0LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00474 · Published 2017-04-24 · Partial fix CWE-200
