Red Hat Security AdvisoryRHSA-2021:1723
sudo security and bug fix update
Released 2021-05-18 · Red Hat rating Low · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux BaseOS (v. 8) sudo-1.8.29-7.el8
Fixes 2 records
Priority LOW 36
selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.01079 · Published 2021-01-12 · Partial fix CWE-59
Priority LOW 15
The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symli…
CVSS 3.1LOW 2.5· Local · Low privileges · No interaction · EPSS 0.01042 · Published 2021-01-12 · Partial fix CWE-59
