Red Hat Security Advisory

RHSA-2023:3264

sudo security update

Released 2023-05-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux Server AUS (v. 7.4) sudo-1.8.19p2-12.el7_4.3
Red Hat Enterprise Linux Server Optional AUS (v. 7.4) sudo-devel-1.8.19p2-12.el7_4.3

Fixes 1 record

TI-2023-08978 CVE-2023-22809 · GHSA-3vwp-294x-6v9c

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed…

HIGH 69

In Sudo before 1.9.12p2, the sudoedit (aka -e) feature mishandles extra arguments passed in the user-provided environment variables (SUDO_EDITOR, VISUAL, and EDITOR), allowing a local attacker to append arbitrary entries…

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.55367 Published 2023-01-18 Fixed CWE-269