Red Hat Security Advisory

RHSA-2023:0293

sudo security update

Released 2023-01-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS EUS (v.8.4) sudo-1.8.29-7.el8_4.2

Fixes 1 record

TI-2023-08978 CVE-2023-22809 · GHSA-3vwp-294x-6v9c

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed…

HIGH 69

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.55367 Published 2023-01-18 Fixed CWE-269