Synopsis

Important: sudo security update

Type/Severity

Security Advisory: Important

Topic

An update for sudo is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

• sudo: Stack based buffer overflow when pwfeedback is enabled (CVE-2019-18634)
  

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux for x86_64 8 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1 x86_64
• Red Hat Enterprise Linux for IBM z Systems 8 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1 s390x
• Red Hat Enterprise Linux for Power, little endian 8 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1 ppc64le
• Red Hat Enterprise Linux for ARM 64 8 aarch64
• Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1 aarch64
• Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1 ppc64le
• Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1 x86_64

Fixes

• BZ - 1796944 - CVE-2019-18634 sudo: Stack based buffer overflow when pwfeedback is enabled

CVEs

• CVE-2019-18634

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux for x86_64 8

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
x86_64
sudo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: a018b5f2e949b200a2fee173b1fd31552b54dee196038506c2cbfe6d6aaed535
sudo-debuginfo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 8b95521dcbbb3c3345ff8b0d3cad9bbbc76050a1d7c7918f741ef1b27c411698
sudo-debugsource-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 99c05138753e15e0ce94109b898f36d3ea37064a67fdf4fb51e8d34bd1430e65

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
x86_64
sudo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: a018b5f2e949b200a2fee173b1fd31552b54dee196038506c2cbfe6d6aaed535
sudo-debuginfo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 8b95521dcbbb3c3345ff8b0d3cad9bbbc76050a1d7c7918f741ef1b27c411698
sudo-debugsource-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 99c05138753e15e0ce94109b898f36d3ea37064a67fdf4fb51e8d34bd1430e65

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
s390x
sudo-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: 75c4d7d8579bc393c7afe8d79f8be739ec8b2e5254bffbd3fcd520c60b7515a5
sudo-debuginfo-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: ab86ad22c2dcee04f209b9d69fad5cc7799113477299b121e8d41da4300016c0
sudo-debugsource-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: 669dc316497b7bcf7955df192fb8773e13c1a0fd5e60add296f0a6f49e5042e2

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
s390x
sudo-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: 75c4d7d8579bc393c7afe8d79f8be739ec8b2e5254bffbd3fcd520c60b7515a5
sudo-debuginfo-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: ab86ad22c2dcee04f209b9d69fad5cc7799113477299b121e8d41da4300016c0
sudo-debugsource-1.8.25p1-8.el8_1.1.s390x.rpm	SHA-256: 669dc316497b7bcf7955df192fb8773e13c1a0fd5e60add296f0a6f49e5042e2

Red Hat Enterprise Linux for Power, little endian 8

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
ppc64le
sudo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 610250443f40b8fe9aa8accffc0093dd7b252e6a327a47a71d31a5d3cad84af1
sudo-debuginfo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: a2b954b53a3548e85071eb2535cde690b4780338b7cea88d23dff242674d8849
sudo-debugsource-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 9b1352c95d3b03b5b36cf4118dc44a24bc275b2b977d0bc1e5453fb673d6207b

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
ppc64le
sudo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 610250443f40b8fe9aa8accffc0093dd7b252e6a327a47a71d31a5d3cad84af1
sudo-debuginfo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: a2b954b53a3548e85071eb2535cde690b4780338b7cea88d23dff242674d8849
sudo-debugsource-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 9b1352c95d3b03b5b36cf4118dc44a24bc275b2b977d0bc1e5453fb673d6207b

Red Hat Enterprise Linux for ARM 64 8

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
aarch64
sudo-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: 5cf97060f71e0046c70f1ecf7bd2850863cb3b131d97c91edbcd9bfa4fc00a9a
sudo-debuginfo-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: 05cad7fd83266e7a8681432636334c446c21a010c8574cdf452c88cdc41c3033
sudo-debugsource-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: b5367c07aa8ccebce6a2b213bafb9281ed22a59f1018bdd31842db0e0ba99b1c

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
aarch64
sudo-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: 5cf97060f71e0046c70f1ecf7bd2850863cb3b131d97c91edbcd9bfa4fc00a9a
sudo-debuginfo-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: 05cad7fd83266e7a8681432636334c446c21a010c8574cdf452c88cdc41c3033
sudo-debugsource-1.8.25p1-8.el8_1.1.aarch64.rpm	SHA-256: b5367c07aa8ccebce6a2b213bafb9281ed22a59f1018bdd31842db0e0ba99b1c

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
ppc64le
sudo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 610250443f40b8fe9aa8accffc0093dd7b252e6a327a47a71d31a5d3cad84af1
sudo-debuginfo-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: a2b954b53a3548e85071eb2535cde690b4780338b7cea88d23dff242674d8849
sudo-debugsource-1.8.25p1-8.el8_1.1.ppc64le.rpm	SHA-256: 9b1352c95d3b03b5b36cf4118dc44a24bc275b2b977d0bc1e5453fb673d6207b

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.1

SRPM
sudo-1.8.25p1-8.el8_1.1.src.rpm	SHA-256: 5dcb4f87c7041243af0abde980fb789a1084b05a28588e4f9599a6af39c60d82
x86_64
sudo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: a018b5f2e949b200a2fee173b1fd31552b54dee196038506c2cbfe6d6aaed535
sudo-debuginfo-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 8b95521dcbbb3c3345ff8b0d3cad9bbbc76050a1d7c7918f741ef1b27c411698
sudo-debugsource-1.8.25p1-8.el8_1.1.x86_64.rpm	SHA-256: 99c05138753e15e0ce94109b898f36d3ea37064a67fdf4fb51e8d34bd1430e65