Red Hat Product Errata RHEA-2018:3199 - Product Enhancement Advisory
Issued:
2018-10-30
Updated:
2018-10-30

RHEA-2018:3199 - Product Enhancement Advisory

Synopsis

sudo bug fix and enhancement update

Type/Severity

Product Enhancement Advisory

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for sudo is now available for Red Hat Enterprise Linux 7.

Description

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.6 Release Notes linked from the References section.

Users of sudo are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server 7 x86_64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
  • Red Hat Enterprise Linux Workstation 7 x86_64
  • Red Hat Enterprise Linux Desktop 7 x86_64
  • Red Hat Enterprise Linux for IBM z Systems 7 s390x
  • Red Hat Enterprise Linux for Power, big endian 7 ppc64
  • Red Hat Enterprise Linux for Scientific Computing 7 x86_64
  • Red Hat Enterprise Linux for Power, little endian 7 ppc64le
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
  • Red Hat Enterprise Linux for ARM 64 7 aarch64
  • Red Hat Enterprise Linux for Power 9 7 ppc64le
  • Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
  • Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

  • BZ - 1502630 - inclusion of system-auth for session hooks missing in sudo PAM snippets
  • BZ - 1506025 - Latest update broke sudo for ldap users.
  • BZ - 1510002 - Ensure that the command input (stdin) eating behaviour of Default log_input is documented
  • BZ - 1533964 - sudo skips PAM account module in case NOPASSWD is used in sudoers
  • BZ - 1548380 - RFE: Create flag to filter to sudo -l output
  • BZ - 1560657 - sudo blocks in poll() for /dev/ptmx with iolog enabled
  • BZ - 1596032 - Why does sudo package depend on vim-minimal?

CVEs

(none)

Red Hat Enterprise Linux Server 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
x86_64
sudo-1.8.23-3.el7.x86_64.rpm SHA-256: fe196ca96ae48c49997bc5a2b59e72d7f56e25e0d8dca31e03464994da436569
sudo-debuginfo-1.8.23-3.el7.i686.rpm SHA-256: 3f0edc5bb5dc43ed57d4ad4954a7f4af7447eb58d7536f044c8513ab961a20c0
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-devel-1.8.23-3.el7.i686.rpm SHA-256: 36b70bfbe5bbff0eb14f8a51c9578b6c06060599794bae85ec69d5b618dbd5a5
sudo-devel-1.8.23-3.el7.x86_64.rpm SHA-256: 705a340a8783ffc3385b5b620b55827c4c5ead6d94389821c12157a4b62b71ec

Red Hat Enterprise Linux Server - Extended Life Cycle Support 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
x86_64
sudo-1.8.23-3.el7.x86_64.rpm SHA-256: fe196ca96ae48c49997bc5a2b59e72d7f56e25e0d8dca31e03464994da436569
sudo-debuginfo-1.8.23-3.el7.i686.rpm SHA-256: 3f0edc5bb5dc43ed57d4ad4954a7f4af7447eb58d7536f044c8513ab961a20c0
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-devel-1.8.23-3.el7.i686.rpm SHA-256: 36b70bfbe5bbff0eb14f8a51c9578b6c06060599794bae85ec69d5b618dbd5a5
sudo-devel-1.8.23-3.el7.x86_64.rpm SHA-256: 705a340a8783ffc3385b5b620b55827c4c5ead6d94389821c12157a4b62b71ec

Red Hat Enterprise Linux Workstation 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
x86_64
sudo-1.8.23-3.el7.x86_64.rpm SHA-256: fe196ca96ae48c49997bc5a2b59e72d7f56e25e0d8dca31e03464994da436569
sudo-debuginfo-1.8.23-3.el7.i686.rpm SHA-256: 3f0edc5bb5dc43ed57d4ad4954a7f4af7447eb58d7536f044c8513ab961a20c0
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-devel-1.8.23-3.el7.i686.rpm SHA-256: 36b70bfbe5bbff0eb14f8a51c9578b6c06060599794bae85ec69d5b618dbd5a5
sudo-devel-1.8.23-3.el7.x86_64.rpm SHA-256: 705a340a8783ffc3385b5b620b55827c4c5ead6d94389821c12157a4b62b71ec

Red Hat Enterprise Linux Desktop 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
x86_64
sudo-1.8.23-3.el7.x86_64.rpm SHA-256: fe196ca96ae48c49997bc5a2b59e72d7f56e25e0d8dca31e03464994da436569
sudo-debuginfo-1.8.23-3.el7.i686.rpm SHA-256: 3f0edc5bb5dc43ed57d4ad4954a7f4af7447eb58d7536f044c8513ab961a20c0
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-devel-1.8.23-3.el7.i686.rpm SHA-256: 36b70bfbe5bbff0eb14f8a51c9578b6c06060599794bae85ec69d5b618dbd5a5
sudo-devel-1.8.23-3.el7.x86_64.rpm SHA-256: 705a340a8783ffc3385b5b620b55827c4c5ead6d94389821c12157a4b62b71ec

Red Hat Enterprise Linux for IBM z Systems 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
s390x
sudo-1.8.23-3.el7.s390x.rpm SHA-256: 59171145ae54443e0e4746be72d2bba7f91793cb61456a90bfe64c33dbc55f4f
sudo-debuginfo-1.8.23-3.el7.s390.rpm SHA-256: 44037b1d27d0706f89d90ae2f4ef15a3bd738e63aade8ea66cf8ce1eb68b8d57
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-devel-1.8.23-3.el7.s390.rpm SHA-256: 9ea728018e3de8514018bf1c910f9a6ddfff6529e90c6a52575e3ecd215dfb12
sudo-devel-1.8.23-3.el7.s390x.rpm SHA-256: e4c275f94b575a2252c43b18d50e13a4f089cfc387fa52d09acd1a19379c052a

Red Hat Enterprise Linux for Power, big endian 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
ppc64
sudo-1.8.23-3.el7.ppc64.rpm SHA-256: 0b38ae37e87ac8e0f95c8e1dffb14fb583fde6fc5973dea0e10112398c4ab8bb
sudo-debuginfo-1.8.23-3.el7.ppc.rpm SHA-256: 18e8e142f11b4a90645000fba192264bd12ed086e962dddbabddae1c8f1b8187
sudo-debuginfo-1.8.23-3.el7.ppc64.rpm SHA-256: 5adfef408a5c4f7dbc8811852323bb4aff6160a92115503c85b0e66df648fc4b
sudo-debuginfo-1.8.23-3.el7.ppc64.rpm SHA-256: 5adfef408a5c4f7dbc8811852323bb4aff6160a92115503c85b0e66df648fc4b
sudo-devel-1.8.23-3.el7.ppc.rpm SHA-256: e8d17c484001de0af1d1242444791957e065709c1c22b1bb78e3499671e4103f
sudo-devel-1.8.23-3.el7.ppc64.rpm SHA-256: b2dbe9dee82a7f5a7b0c0779a787d8803d96a610a8a800184b646d837be727ac

Red Hat Enterprise Linux for Scientific Computing 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
x86_64
sudo-1.8.23-3.el7.x86_64.rpm SHA-256: fe196ca96ae48c49997bc5a2b59e72d7f56e25e0d8dca31e03464994da436569
sudo-debuginfo-1.8.23-3.el7.i686.rpm SHA-256: 3f0edc5bb5dc43ed57d4ad4954a7f4af7447eb58d7536f044c8513ab961a20c0
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-debuginfo-1.8.23-3.el7.x86_64.rpm SHA-256: f3712364fa2a09c11270eb43d988505a23f9a5250da5b327f3c3256b56d13663
sudo-devel-1.8.23-3.el7.i686.rpm SHA-256: 36b70bfbe5bbff0eb14f8a51c9578b6c06060599794bae85ec69d5b618dbd5a5
sudo-devel-1.8.23-3.el7.x86_64.rpm SHA-256: 705a340a8783ffc3385b5b620b55827c4c5ead6d94389821c12157a4b62b71ec

Red Hat Enterprise Linux for Power, little endian 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
ppc64le
sudo-1.8.23-3.el7.ppc64le.rpm SHA-256: 710c390c494e9d144a7ad12541416f4095a51a94c5e817dcc6f4e906030b0a93
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-devel-1.8.23-3.el7.ppc64le.rpm SHA-256: 2239e906eaf635402cef9510e154a59268802a347c350c75314c9308622660b8

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
s390x
sudo-1.8.23-3.el7.s390x.rpm SHA-256: 59171145ae54443e0e4746be72d2bba7f91793cb61456a90bfe64c33dbc55f4f
sudo-debuginfo-1.8.23-3.el7.s390.rpm SHA-256: 44037b1d27d0706f89d90ae2f4ef15a3bd738e63aade8ea66cf8ce1eb68b8d57
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-devel-1.8.23-3.el7.s390.rpm SHA-256: 9ea728018e3de8514018bf1c910f9a6ddfff6529e90c6a52575e3ecd215dfb12
sudo-devel-1.8.23-3.el7.s390x.rpm SHA-256: e4c275f94b575a2252c43b18d50e13a4f089cfc387fa52d09acd1a19379c052a

Red Hat Enterprise Linux for ARM 64 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
aarch64
sudo-1.8.23-3.el7.aarch64.rpm SHA-256: 89d4444e828bb9f606f0ed12b9b9268984d0e52a5864440798fdd20995d0af5a
sudo-debuginfo-1.8.23-3.el7.aarch64.rpm SHA-256: 11aee35608811d7d002eb68987aae65c80c88dc0a24176c18305ea980fcaa6fe
sudo-debuginfo-1.8.23-3.el7.aarch64.rpm SHA-256: 11aee35608811d7d002eb68987aae65c80c88dc0a24176c18305ea980fcaa6fe
sudo-devel-1.8.23-3.el7.aarch64.rpm SHA-256: 3db63603fbf5e5545e093e3fdb532b914f06210489227ff79e195f51b0a556c3

Red Hat Enterprise Linux for Power 9 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
ppc64le
sudo-1.8.23-3.el7.ppc64le.rpm SHA-256: 710c390c494e9d144a7ad12541416f4095a51a94c5e817dcc6f4e906030b0a93
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-devel-1.8.23-3.el7.ppc64le.rpm SHA-256: 2239e906eaf635402cef9510e154a59268802a347c350c75314c9308622660b8

Red Hat Enterprise Linux for IBM System z (Structure A) 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
s390x
sudo-1.8.23-3.el7.s390x.rpm SHA-256: 59171145ae54443e0e4746be72d2bba7f91793cb61456a90bfe64c33dbc55f4f
sudo-debuginfo-1.8.23-3.el7.s390.rpm SHA-256: 44037b1d27d0706f89d90ae2f4ef15a3bd738e63aade8ea66cf8ce1eb68b8d57
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-debuginfo-1.8.23-3.el7.s390x.rpm SHA-256: d39f9492f089238adedf7691965cd1700ba457ae5657ff6dd5978db23ee17e73
sudo-devel-1.8.23-3.el7.s390.rpm SHA-256: 9ea728018e3de8514018bf1c910f9a6ddfff6529e90c6a52575e3ecd215dfb12
sudo-devel-1.8.23-3.el7.s390x.rpm SHA-256: e4c275f94b575a2252c43b18d50e13a4f089cfc387fa52d09acd1a19379c052a

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
ppc64
sudo-1.8.23-3.el7.ppc64.rpm SHA-256: 0b38ae37e87ac8e0f95c8e1dffb14fb583fde6fc5973dea0e10112398c4ab8bb
sudo-debuginfo-1.8.23-3.el7.ppc.rpm SHA-256: 18e8e142f11b4a90645000fba192264bd12ed086e962dddbabddae1c8f1b8187
sudo-debuginfo-1.8.23-3.el7.ppc64.rpm SHA-256: 5adfef408a5c4f7dbc8811852323bb4aff6160a92115503c85b0e66df648fc4b
sudo-debuginfo-1.8.23-3.el7.ppc64.rpm SHA-256: 5adfef408a5c4f7dbc8811852323bb4aff6160a92115503c85b0e66df648fc4b
sudo-devel-1.8.23-3.el7.ppc.rpm SHA-256: e8d17c484001de0af1d1242444791957e065709c1c22b1bb78e3499671e4103f
sudo-devel-1.8.23-3.el7.ppc64.rpm SHA-256: b2dbe9dee82a7f5a7b0c0779a787d8803d96a610a8a800184b646d837be727ac

Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7

SRPM
sudo-1.8.23-3.el7.src.rpm SHA-256: acebdc4b9a93af91254576b6a3993554815570b0030f1a59912f4f8cba412db8
ppc64le
sudo-1.8.23-3.el7.ppc64le.rpm SHA-256: 710c390c494e9d144a7ad12541416f4095a51a94c5e817dcc6f4e906030b0a93
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-debuginfo-1.8.23-3.el7.ppc64le.rpm SHA-256: 9962598259d81be63707cfcca78f822e43dcef82ee7e1a2b793dbaeed6aaaaf3
sudo-devel-1.8.23-3.el7.ppc64le.rpm SHA-256: 2239e906eaf635402cef9510e154a59268802a347c350c75314c9308622660b8

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.