RHSA-2021:0218 - Security Advisory

Overview
Updated Packages

Synopsis

Important: sudo security update

Type/Severity

Security Advisory: Important

Red Hat Insights patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for sudo is now available for Red Hat Enterprise Linux 8.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Security Fix(es):

sudo: Heap buffer overflow in argument parsing (CVE-2021-3156)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

Red Hat Enterprise Linux for x86_64 8 x86_64
Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4 x86_64
Red Hat Enterprise Linux Server - AUS 8.4 x86_64
Red Hat Enterprise Linux for IBM z Systems 8 s390x
Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4 s390x
Red Hat Enterprise Linux for Power, little endian 8 ppc64le
Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4 ppc64le
Red Hat Enterprise Linux Server - TUS 8.4 x86_64
Red Hat Enterprise Linux for ARM 64 8 aarch64
Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4 aarch64
Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4 ppc64le
Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4 x86_64

Fixes

BZ - 1917684 - CVE-2021-3156 sudo: Heap buffer overflow in argument parsing

CVEs

CVE-2021-3156

References

Note: More recent versions of these packages may be available. Click a package name for more details.

Red Hat Enterprise Linux for x86_64 8

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
x86_64
sudo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: bb561c71830b21f95bff1a2e9c06bf2aafda52e16d3512663c610d7d6455a40f
sudo-debuginfo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: ac36d99bc9467b4842d26fc9f48e7f8e71a71416ff1e1436a2fc025fcbac59ee
sudo-debugsource-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: 6d6f1a0b094cc3704c8b631dc2b1975ff4369dca38941bac5a63b81992267217

Red Hat Enterprise Linux for x86_64 - Extended Update Support 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
x86_64
sudo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: bb561c71830b21f95bff1a2e9c06bf2aafda52e16d3512663c610d7d6455a40f
sudo-debuginfo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: ac36d99bc9467b4842d26fc9f48e7f8e71a71416ff1e1436a2fc025fcbac59ee
sudo-debugsource-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: 6d6f1a0b094cc3704c8b631dc2b1975ff4369dca38941bac5a63b81992267217

Red Hat Enterprise Linux Server - AUS 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
x86_64
sudo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: bb561c71830b21f95bff1a2e9c06bf2aafda52e16d3512663c610d7d6455a40f
sudo-debuginfo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: ac36d99bc9467b4842d26fc9f48e7f8e71a71416ff1e1436a2fc025fcbac59ee
sudo-debugsource-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: 6d6f1a0b094cc3704c8b631dc2b1975ff4369dca38941bac5a63b81992267217

Red Hat Enterprise Linux for IBM z Systems 8

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
s390x
sudo-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 8fc90f805b21361549ef9bb669569862aa35a45efcfa65b25c31aa959f77c1b4
sudo-debuginfo-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 437f22f85e8c4be1df736a0447c5377bd5594fba640052f98c0283980b57d5a1
sudo-debugsource-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 7c52239b5456b66fe47fd0355c2bca72c73e1a11a7052c6b196c85eda86209b6

Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
s390x
sudo-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 8fc90f805b21361549ef9bb669569862aa35a45efcfa65b25c31aa959f77c1b4
sudo-debuginfo-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 437f22f85e8c4be1df736a0447c5377bd5594fba640052f98c0283980b57d5a1
sudo-debugsource-1.8.29-6.el8_3.1.s390x.rpm	SHA-256: 7c52239b5456b66fe47fd0355c2bca72c73e1a11a7052c6b196c85eda86209b6

Red Hat Enterprise Linux for Power, little endian 8

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
ppc64le
sudo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: e07ebbdde3348bb40a29d6a24e804a830696d13e5a3f148458c2fd40729cdd58
sudo-debuginfo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 2024b589c6384761dad61978c5af38fcb60d71c04cc3652606b5e549f1eae0e7
sudo-debugsource-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 1a2c054e985edcf9ddb3cf81f8cd2e751159f61a55e4eb7cbb1d27809b761711

Red Hat Enterprise Linux for Power, little endian - Extended Update Support 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
ppc64le
sudo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: e07ebbdde3348bb40a29d6a24e804a830696d13e5a3f148458c2fd40729cdd58
sudo-debuginfo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 2024b589c6384761dad61978c5af38fcb60d71c04cc3652606b5e549f1eae0e7
sudo-debugsource-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 1a2c054e985edcf9ddb3cf81f8cd2e751159f61a55e4eb7cbb1d27809b761711

Red Hat Enterprise Linux Server - TUS 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
x86_64
sudo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: bb561c71830b21f95bff1a2e9c06bf2aafda52e16d3512663c610d7d6455a40f
sudo-debuginfo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: ac36d99bc9467b4842d26fc9f48e7f8e71a71416ff1e1436a2fc025fcbac59ee
sudo-debugsource-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: 6d6f1a0b094cc3704c8b631dc2b1975ff4369dca38941bac5a63b81992267217

Red Hat Enterprise Linux for ARM 64 8

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
aarch64
sudo-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: e5ce53588a7d925f2302963b47ad99e879cd8ec9e8b8b40e792eb52ed1448868
sudo-debuginfo-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: e1a845a5afc74f65beff6857b0580b295f0ae3903fbccb9eff27352e71096f10
sudo-debugsource-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: b867209af99c00204a6cbfcfb9cfd79cbfd61fe31d57356ab8a57b748af416bb

Red Hat Enterprise Linux for ARM 64 - Extended Update Support 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
aarch64
sudo-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: e5ce53588a7d925f2302963b47ad99e879cd8ec9e8b8b40e792eb52ed1448868
sudo-debuginfo-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: e1a845a5afc74f65beff6857b0580b295f0ae3903fbccb9eff27352e71096f10
sudo-debugsource-1.8.29-6.el8_3.1.aarch64.rpm	SHA-256: b867209af99c00204a6cbfcfb9cfd79cbfd61fe31d57356ab8a57b748af416bb

Red Hat Enterprise Linux Server (for IBM Power LE) - Update Services for SAP Solutions 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
ppc64le
sudo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: e07ebbdde3348bb40a29d6a24e804a830696d13e5a3f148458c2fd40729cdd58
sudo-debuginfo-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 2024b589c6384761dad61978c5af38fcb60d71c04cc3652606b5e549f1eae0e7
sudo-debugsource-1.8.29-6.el8_3.1.ppc64le.rpm	SHA-256: 1a2c054e985edcf9ddb3cf81f8cd2e751159f61a55e4eb7cbb1d27809b761711

Red Hat Enterprise Linux Server - Update Services for SAP Solutions 8.4

SRPM
sudo-1.8.29-6.el8_3.1.src.rpm	SHA-256: cfc6fe9399697adcb668615aee84e0249ea49421c3ce7db31852507e65769a1a
x86_64
sudo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: bb561c71830b21f95bff1a2e9c06bf2aafda52e16d3512663c610d7d6455a40f
sudo-debuginfo-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: ac36d99bc9467b4842d26fc9f48e7f8e71a71416ff1e1436a2fc025fcbac59ee
sudo-debugsource-1.8.29-6.el8_3.1.x86_64.rpm	SHA-256: 6d6f1a0b094cc3704c8b631dc2b1975ff4369dca38941bac5a63b81992267217

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.