Red Hat Security AdvisoryRHSA-2016:2593
sudo security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) sudo-1.8.6p7-20.el7
- Red Hat Enterprise Linux Client Optional (v. 7) sudo-devel-1.8.6p7-20.el7
- Red Hat Enterprise Linux ComputeNode (v. 7) sudo-1.8.6p7-20.el7
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) sudo-devel-1.8.6p7-20.el7
- Red Hat Enterprise Linux Server (v. 7) sudo-1.8.6p7-20.el7
- Red Hat Enterprise Linux Server Optional (v. 7) sudo-devel-1.8.6p7-20.el7, sudo-devel-1.8.6p7-20.el7.ppc
- Red Hat Enterprise Linux Workstation (v. 7) sudo-1.8.6p7-20.el7
- Red Hat Enterprise Linux Workstation Optional (v. 7) sudo-devel-1.8.6p7-20.el7
Fixes 1 record
Priority LOW 21
sudo: It was discovered that the default sudo configuration on Red Hat Enterprise Linux and possibly other Linux implementations preserves the value of INPUTRC which could lead to information disclosure.
CVSS 3.0MEDIUM 4.4· Local · High privileges · No interaction · EPSS 0.00403 · Published 2016-12-22 · Partial fix CWE-200
