Red Hat 製品エラータ RHSA-2019:3754 - Security Advisory
発行日:
2019-11-06
更新日:
2019-11-06

RHSA-2019:3754 - Security Advisory

概要

Important: sudo security update

タイプ/重大度

Security Advisory: Important

Red Hat Lightspeed パッチ分析

このアドバイザリーの影響を受けるシステムを特定し、修正します。

影響を受けるシステムの表示

トピック

An update for sudo is now available for Red Hat Enterprise Linux 6.6 Advanced Update Support.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

説明

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

  • sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword (CVE-2019-14287)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

解決策

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

影響を受ける製品

  • Red Hat Enterprise Linux Server - AUS 6.6 x86_64

修正

  • BZ - 1760531 - CVE-2019-14287 sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

Red Hat Enterprise Linux Server - AUS 6.6

SRPM
sudo-1.8.6p3-15.el6_6.2.src.rpm SHA-256: 9253d546d7c95d65479fecf47496b41970df7e911b3b2e4335dc2c3355443130
x86_64
sudo-1.8.6p3-15.el6_6.2.x86_64.rpm SHA-256: d05bb588427301c449f6b532883333416a0c929dbf98b879f7a6084b716fc8e8
sudo-debuginfo-1.8.6p3-15.el6_6.2.i686.rpm SHA-256: f00f85d02ff6d8ddff0a4dfb66608aa786d967ef6e869cee33d538010e92a3f3
sudo-debuginfo-1.8.6p3-15.el6_6.2.x86_64.rpm SHA-256: 2f90d69edfdd77efb1b4a110a47a4bbc6a551689711a91a4137d7fdd11267a2f
sudo-debuginfo-1.8.6p3-15.el6_6.2.x86_64.rpm SHA-256: 2f90d69edfdd77efb1b4a110a47a4bbc6a551689711a91a4137d7fdd11267a2f
sudo-devel-1.8.6p3-15.el6_6.2.i686.rpm SHA-256: 323b15e438f1ae042649740a35cf0957f2d5b8c38131c9215312adde3a64c31d
sudo-devel-1.8.6p3-15.el6_6.2.x86_64.rpm SHA-256: fb7a596b304914225fe1a2ce4753940bf507c696ca384a24c66b9605430981f1

Red Hat のセキュリティーに関する連絡先は secalert@redhat.com です。 連絡先の詳細は https://access.redhat.com/security/team/contact/ をご覧ください。