Synopsis

sudo bug fix and enhancement update

Type/Severity

Bug Fix Advisory

Topic

Updated sudo packages that fix several bugs and add various enhancements are now
available for Red Hat Enterprise Linux 6.

Description

The sudo (super user do) utility allows system administrators to give certain
users the ability to run commands as root.

The updated sudo packages include numerous bug fixes and enhancements. Space
precludes documenting all of these changes in this advisory. Users are directed
to the Red Hat Enterprise Linux 6.4 Technical Notes for information on the most
significant of these changes:

https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/sudo.html

Users of sudo are advised to upgrade to these updated packages, which fix these
bugs and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386

Fixes

• BZ - 759480 - Rebase sudo to 1.8 in RHEL 6.4
• BZ - 789937 - [RFE] Add ability to treat files authoritatively in sudoers.ldap
• BZ - 804123 - sudo does not call pam_close_session() or pam_end()
• BZ - 852045 - ulimit -c got Operation not permitted
• BZ - 860397 - new /etc/sudo-ldap.conf configuration file problems
• BZ - 872740 - SPACE INVADES SUDO!
• BZ - 876208 - sudoRunAsUser #uid specification doesn't work
• BZ - 876578 - erealloc3 error on sssd sudoHost netgroup mismatch
• BZ - 879633 - sudo + sssd + local user sends e-mail to administrator
• BZ - 903020 - sudoers containing specially crafted aliases causes segfault of visudo

CVEs

• CVE-2013-1776

References

• https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/sudo.html

Red Hat Enterprise Linux Server 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
x86_64
sudo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 23e3c9a62e6a997da98dfc61dc3d6382f6de30cb8d699760317ae66e761d9958
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5
sudo-devel-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 5a845176ff0c0c9d49ad6457574e54767b76523ab04defa015064b11c560cee0
i386
sudo-1.8.6p3-7.el6.i686.rpm	SHA-256: d6bc43e8e4c2d9f7408f8f05e8e223d5600421adf84868382e5153e111523853
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5

Red Hat Enterprise Linux Workstation 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
x86_64
sudo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 23e3c9a62e6a997da98dfc61dc3d6382f6de30cb8d699760317ae66e761d9958
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5
sudo-devel-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 5a845176ff0c0c9d49ad6457574e54767b76523ab04defa015064b11c560cee0
i386
sudo-1.8.6p3-7.el6.i686.rpm	SHA-256: d6bc43e8e4c2d9f7408f8f05e8e223d5600421adf84868382e5153e111523853
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5

Red Hat Enterprise Linux Desktop 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
x86_64
sudo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 23e3c9a62e6a997da98dfc61dc3d6382f6de30cb8d699760317ae66e761d9958
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5
sudo-devel-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 5a845176ff0c0c9d49ad6457574e54767b76523ab04defa015064b11c560cee0
i386
sudo-1.8.6p3-7.el6.i686.rpm	SHA-256: d6bc43e8e4c2d9f7408f8f05e8e223d5600421adf84868382e5153e111523853
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5

Red Hat Enterprise Linux for IBM z Systems 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
s390x
sudo-1.8.6p3-7.el6.s390x.rpm	SHA-256: 44e67e8ca949632c92a3e933b5490277bb1cb50654e82294810500681c91e6f6
sudo-debuginfo-1.8.6p3-7.el6.s390.rpm	SHA-256: 6c3254409aa3b3a970141bc4c11318b74c4ceed811df56f797e5c88c0e05a03f
sudo-debuginfo-1.8.6p3-7.el6.s390x.rpm	SHA-256: 4cd66b5478730ec49f3194ca21d21e2d770249f18648a0d56cb196885984496d
sudo-debuginfo-1.8.6p3-7.el6.s390x.rpm	SHA-256: 4cd66b5478730ec49f3194ca21d21e2d770249f18648a0d56cb196885984496d
sudo-devel-1.8.6p3-7.el6.s390.rpm	SHA-256: 70a61a937075986a332df218ffcc72876344c971453fd3359ab4f4b43b6e1560
sudo-devel-1.8.6p3-7.el6.s390x.rpm	SHA-256: 7d018b8ddc49f0898e9b08e9d207bec576d5e634dc2e916485918ebdbd6843b6

Red Hat Enterprise Linux for Power, big endian 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
ppc64
sudo-1.8.6p3-7.el6.ppc64.rpm	SHA-256: 8dbc7044778e8a56951f0a638bd39d0c8535c5621fa03858c77c09c8e042eef2
sudo-debuginfo-1.8.6p3-7.el6.ppc.rpm	SHA-256: 0b22d5774943ce5c7f6f07c1e495c1f677974e20a70f0ac79c518ab3a1b770ca
sudo-debuginfo-1.8.6p3-7.el6.ppc64.rpm	SHA-256: 6aff6f29523baad70b78d255277678a2c26081884a8880c5e74d2729af8284a7
sudo-debuginfo-1.8.6p3-7.el6.ppc64.rpm	SHA-256: 6aff6f29523baad70b78d255277678a2c26081884a8880c5e74d2729af8284a7
sudo-devel-1.8.6p3-7.el6.ppc.rpm	SHA-256: 047a18a8b231a7a83137e12e72a4482619818d1cfd69597cbe2a28cd181797f9
sudo-devel-1.8.6p3-7.el6.ppc64.rpm	SHA-256: 760ba3277b14a10d89ce838e1e5a2f1458f8e4c3572b83645df7a2628bde6caf

Red Hat Enterprise Linux for Scientific Computing 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
x86_64
sudo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 23e3c9a62e6a997da98dfc61dc3d6382f6de30cb8d699760317ae66e761d9958
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5
sudo-devel-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 5a845176ff0c0c9d49ad6457574e54767b76523ab04defa015064b11c560cee0

Red Hat Enterprise Linux Server from RHUI 6

SRPM
sudo-1.8.6p3-7.el6.src.rpm	SHA-256: 2cf38e2d20225605405468d2538abf7b1243e7d5b723d9b5c7a33b6bc658bfbc
x86_64
sudo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 23e3c9a62e6a997da98dfc61dc3d6382f6de30cb8d699760317ae66e761d9958
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-debuginfo-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 4a8925aec520fc1c665df0826777f3d1438b3bbf94640545f626b64c4aae845b
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5
sudo-devel-1.8.6p3-7.el6.x86_64.rpm	SHA-256: 5a845176ff0c0c9d49ad6457574e54767b76523ab04defa015064b11c560cee0
i386
sudo-1.8.6p3-7.el6.i686.rpm	SHA-256: d6bc43e8e4c2d9f7408f8f05e8e223d5600421adf84868382e5153e111523853
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-debuginfo-1.8.6p3-7.el6.i686.rpm	SHA-256: 723abd43573bce4705328a06e16786ea00b25ede2a5310c99465eebe056c10a8
sudo-devel-1.8.6p3-7.el6.i686.rpm	SHA-256: 532008feca3d140a98ae2c47141f6de6d7335d12f45698205d0689c80bd554c5