Synopsis

Important: sudo security update

Type/Severity

Security Advisory: Important

Topic

An update for sudo is now available for Red Hat Enterprise Linux 5 Extended
Lifecycle Support.

Red Hat Product Security has rated this update as having a security impact of
Important. A Common Vulnerability Scoring System (CVSS) base score, which gives
a detailed severity rating, is available for each vulnerability from the CVE
link(s) in the References section.

Description

The sudo packages contain the sudo utility which allows system administrators to
provide certain users with the permission to execute privileged commands, which
are used for system management purposes, without having to log in as root.

Security Fix(es):

• A flaw was found in the way sudo parsed tty information from the process
  status file in the proc filesystem. A local user with privileges to execute
  commands via sudo could use this flaw to escalate their privileges to root.
  (CVE-2017-1000367)
  

Red Hat would like to thank Qualys Security for reporting this issue.

Solution

For details on how to apply this update, which includes the changes described in
this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 5 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5 s390x

Fixes

• BZ - 1453074 - CVE-2017-1000367 sudo: Privilege escalation in via improper get_process_ttyname() parsing

CVEs

• CVE-2017-1000367

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server - Extended Life Cycle Support 5

SRPM
sudo-1.7.2p1-30.el5_11.src.rpm	SHA-256: 484fb11564224dfcc834d308345038d85ed7b16c2a0c4e1a65c4b8ee63fb4b54
x86_64
sudo-1.7.2p1-30.el5_11.x86_64.rpm	SHA-256: 8084b4a0eb99d5969a8c264962e9a0850f57c634ce137f2e4de047a66b62e371
sudo-debuginfo-1.7.2p1-30.el5_11.x86_64.rpm	SHA-256: 9ee733a0a12140583b1cdda969183bb2625533000698748d6f6d3d035ed3f2bc
i386
sudo-1.7.2p1-30.el5_11.i386.rpm	SHA-256: da88f769db7409ad7ad594c17252ba72ef6804fc12185b007a43c3c30b7ba650
sudo-debuginfo-1.7.2p1-30.el5_11.i386.rpm	SHA-256: 4deb4034c68903e4ba9dbf6e5e5334d2db41e41bb1ba48736c1c0fbc8263ef24

Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 5

SRPM
sudo-1.7.2p1-30.el5_11.src.rpm	SHA-256: 484fb11564224dfcc834d308345038d85ed7b16c2a0c4e1a65c4b8ee63fb4b54
s390x
sudo-1.7.2p1-30.el5_11.s390x.rpm	SHA-256: 951c828824bfd2f67a8be622da1590481da04a13e1381ec51679d0e473aae6e6
sudo-debuginfo-1.7.2p1-30.el5_11.s390x.rpm	SHA-256: 449501edb38f6048d0c5bd3d81f344605e8853bf129286bcdeae724fb107e4eb