You are here
Home > Preporuke > Sigurnosni propust programskog paketa sudo

Sigurnosni propust programskog paketa sudo

  • Detalji os-a: FED
  • Važnost: IMP
  • Operativni sustavi: L
  • Kategorije: LFE

——————————————————————————–
Fedora Update Notification
FEDORA-2015-386863df8a
2015-11-08 05:29:14.348314
——————————————————————————–

Name : sudo
Product : Fedora 23
Version : 1.8.15
Release : 1.fc23
URL : http://www.courtesan.com/sudo/
Summary : Allows restricted root access for specified users
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.

——————————————————————————–
Update Information:

sudo-1.8.15-1.fc21 – update to 1.8.15 – fixes CVE-2015-5602
sudo-1.8.15-1.fc22 – update to 1.8.15 – fixes CVE-2015-5602
sudo-1.8.15-1.fc23 – update to 1.8.15 – fixes CVE-2015-5602
——————————————————————————–
References:

[ 1 ] Bug #1277426 – CVE-2015-5602 sudo: Unauthorized privilege escalation in sudoedit
https://bugzilla.redhat.com/show_bug.cgi?id=1277426
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update sudo’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

——————————————————————————–
Fedora Update Notification
FEDORA-2015-6a267387c0
2015-11-08 05:28:27.315222
——————————————————————————–

Name : sudo
Product : Fedora 22
Version : 1.8.15
Release : 1.fc22
URL : http://www.courtesan.com/sudo/
Summary : Allows restricted root access for specified users
Description :
Sudo (superuser do) allows a system administrator to give certain
users (or groups of users) the ability to run some (or all) commands
as root while logging all commands and arguments. Sudo operates on a
per-command basis. It is not a replacement for the shell. Features
include: the ability to restrict what commands a user may run on a
per-host basis, copious logging of each command (providing a clear
audit trail of who did what), a configurable timeout of the sudo
command, and the ability to use the same configuration file (sudoers)
on many different machines.

——————————————————————————–
Update Information:

sudo-1.8.15-1.fc21 – update to 1.8.15 – fixes CVE-2015-5602
sudo-1.8.15-1.fc22 – update to 1.8.15 – fixes CVE-2015-5602
sudo-1.8.15-1.fc23 – update to 1.8.15 – fixes CVE-2015-5602
——————————————————————————–
References:

[ 1 ] Bug #1277426 – CVE-2015-5602 sudo: Unauthorized privilege escalation in sudoedit
https://bugzilla.redhat.com/show_bug.cgi?id=1277426
——————————————————————————–

This update can be installed with the “yum” update program. Use
su -c ‘yum update sudo’ at the command line.
For more information, refer to “Managing Software with yum”,
available at https://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
——————————————————————————–
_______________________________________________
package-announce mailing list
package-announce@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/package-announce

AutorTomislav Protega
Cert idNCERT-REF-2015-11-0006-ADV
CveCVE-2015-5602
ID izvornikaFEDORA-2015-386863
Proizvodsudo
Izvorhttp://www.redhat.com
Top
More in Preporuke
Ranjivosti programskog paketa krb5

Otkrivene su ranjivosti u programskom paketu krb5 za Debian. Ranjivosti su posljedica neispravnog upravljanja paketima SPNEGO i IAKERB te neispravnom...

Close