Security update for sudo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2024:0876-2 Final 1 1 2024-03-13T14:45:44Z current 2024-03-13T14:45:44Z 2024-03-13T14:45:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sudo This update for sudo fixes the following issues: - CVE-2023-42465: Fixed issues introduced by first patches (bsc#1221151, bsc#1221134). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sle-micro/5.5/toolbox:latest-2024-876,Container suse/sle-micro/5.5:latest-2024-876,Image SLES15-SP5-Azure-3P-2024-876,Image SLES15-SP5-Azure-Basic-2024-876,Image SLES15-SP5-Azure-Standard-2024-876,Image SLES15-SP5-BYOS-Azure-2024-876,Image SLES15-SP5-BYOS-EC2-2024-876,Image SLES15-SP5-BYOS-GCE-2024-876,Image SLES15-SP5-CHOST-BYOS-Aliyun-2024-876,Image SLES15-SP5-CHOST-BYOS-Azure-2024-876,Image SLES15-SP5-CHOST-BYOS-EC2-2024-876,Image SLES15-SP5-CHOST-BYOS-GCE-2024-876,Image SLES15-SP5-CHOST-BYOS-GDC-2024-876,Image SLES15-SP5-CHOST-BYOS-SAP-CCloud-2024-876,Image SLES15-SP5-EC2-2024-876,Image SLES15-SP5-GCE-2024-876,Image SLES15-SP5-HPC-Azure-2024-876,Image SLES15-SP5-HPC-BYOS-Azure-2024-876,Image SLES15-SP5-HPC-BYOS-EC2-2024-876,Image SLES15-SP5-HPC-BYOS-GCE-2024-876,Image SLES15-SP5-Hardened-BYOS-Azure-2024-876,Image SLES15-SP5-Hardened-BYOS-EC2-2024-876,Image SLES15-SP5-Hardened-BYOS-GCE-2024-876,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-2024-876,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure-2024-876,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2-2024-876,Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE-2024-876,Image SLES15-SP5-Manager-Server-5-0-2024-876,Image SLES15-SP5-Manager-Server-5-0-Azure-llc-2024-876,Image SLES15-SP5-Manager-Server-5-0-Azure-ltd-2024-876,Image SLES15-SP5-Manager-Server-5-0-BYOS-2024-876,Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure-2024-876,Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2-2024-876,Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE-2024-876,Image SLES15-SP5-Manager-Server-5-0-EC2-llc-2024-876,Image SLES15-SP5-Manager-Server-5-0-EC2-ltd-2024-876,Image SLES15-SP5-Micro-5-5-2024-876,Image SLES15-SP5-Micro-5-5-Azure-2024-876,Image SLES15-SP5-Micro-5-5-BYOS-2024-876,Image SLES15-SP5-Micro-5-5-BYOS-Azure-2024-876,Image SLES15-SP5-Micro-5-5-BYOS-EC2-2024-876,Image SLES15-SP5-Micro-5-5-BYOS-GCE-2024-876,Image SLES15-SP5-Micro-5-5-EC2-2024-876,Image SLES15-SP5-Micro-5-5-GCE-2024-876,Image SLES15-SP5-SAP-Azure-3P-2024-876,Image SLES15-SP5-SAP-Azure-LI-BYOS-2024-876,Image SLES15-SP5-SAP-Azure-LI-BYOS-Production-2024-876,Image SLES15-SP5-SAP-Azure-VLI-BYOS-2024-876,Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production-2024-876,Image SLES15-SP5-SAP-BYOS-Azure-2024-876,Image SLES15-SP5-SAP-BYOS-EC2-2024-876,Image SLES15-SP5-SAP-BYOS-GCE-2024-876,Image SLES15-SP5-SAP-Hardened-Azure-2024-876,Image SLES15-SP5-SAP-Hardened-BYOS-Azure-2024-876,Image SLES15-SP5-SAP-Hardened-BYOS-EC2-2024-876,Image SLES15-SP5-SAP-Hardened-BYOS-GCE-2024-876,Image SLES15-SP5-SAP-Hardened-GCE-2024-876,Image SLES15-SP5-SAPCAL-Azure-2024-876,Image SLES15-SP5-SAPCAL-EC2-2024-876,Image SLES15-SP5-SAPCAL-GCE-2024-876,SUSE-2024-876,SUSE-SLE-Micro-5.5-2024-876 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2024/suse-su-20240876-2/ Link for SUSE-SU-2024:0876-2 https://lists.suse.com/pipermail/sle-updates/2024-August/036519.html E-Mail link for SUSE-SU-2024:0876-2 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1221134 SUSE Bug 1221134 https://bugzilla.suse.com/1221151 SUSE Bug 1221151 https://www.suse.com/security/cve/CVE-2023-42465/ SUSE CVE CVE-2023-42465 page Container suse/sle-micro/5.5/toolbox:latest Container suse/sle-micro/5.5:latest Image SLES15-SP5-Azure-3P Image SLES15-SP5-Azure-Basic Image SLES15-SP5-Azure-Standard Image SLES15-SP5-BYOS-Azure Image SLES15-SP5-BYOS-EC2 Image SLES15-SP5-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-Aliyun Image SLES15-SP5-CHOST-BYOS-Azure Image SLES15-SP5-CHOST-BYOS-EC2 Image SLES15-SP5-CHOST-BYOS-GCE Image SLES15-SP5-CHOST-BYOS-GDC Image SLES15-SP5-CHOST-BYOS-SAP-CCloud Image SLES15-SP5-EC2 Image SLES15-SP5-GCE Image SLES15-SP5-HPC-Azure Image SLES15-SP5-HPC-BYOS-Azure Image SLES15-SP5-HPC-BYOS-EC2 Image SLES15-SP5-HPC-BYOS-GCE Image SLES15-SP5-Hardened-BYOS-Azure Image SLES15-SP5-Hardened-BYOS-EC2 Image SLES15-SP5-Hardened-BYOS-GCE Image SLES15-SP5-Manager-Proxy-5-0-BYOS Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0 Image SLES15-SP5-Manager-Server-5-0-Azure-llc Image SLES15-SP5-Manager-Server-5-0-Azure-ltd Image SLES15-SP5-Manager-Server-5-0-BYOS Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE Image SLES15-SP5-Manager-Server-5-0-EC2-llc Image SLES15-SP5-Manager-Server-5-0-EC2-ltd Image SLES15-SP5-Micro-5-5 Image SLES15-SP5-Micro-5-5-Azure Image SLES15-SP5-Micro-5-5-BYOS Image SLES15-SP5-Micro-5-5-BYOS-Azure Image SLES15-SP5-Micro-5-5-BYOS-EC2 Image SLES15-SP5-Micro-5-5-BYOS-GCE Image SLES15-SP5-Micro-5-5-EC2 Image SLES15-SP5-Micro-5-5-GCE Image SLES15-SP5-SAP-Azure-3P Image SLES15-SP5-SAP-Azure-LI-BYOS Image SLES15-SP5-SAP-Azure-LI-BYOS-Production Image SLES15-SP5-SAP-Azure-VLI-BYOS Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production Image SLES15-SP5-SAP-BYOS-Azure Image SLES15-SP5-SAP-BYOS-EC2 Image SLES15-SP5-SAP-BYOS-GCE Image SLES15-SP5-SAP-Hardened-Azure Image SLES15-SP5-SAP-Hardened-BYOS-Azure Image SLES15-SP5-SAP-Hardened-BYOS-EC2 Image SLES15-SP5-SAP-Hardened-BYOS-GCE Image SLES15-SP5-SAP-Hardened-GCE Image SLES15-SP5-SAPCAL-Azure Image SLES15-SP5-SAPCAL-EC2 Image SLES15-SP5-SAPCAL-GCE SUSE Linux Enterprise Micro 5.5 sudo-1.9.12p1-150500.7.10.1 sudo-devel-1.9.12p1-150500.7.10.1 sudo-plugin-python-1.9.12p1-150500.7.10.1 sudo-test-1.9.12p1-150500.7.10.1 sudo-1.9.12p1-150500.7.10.1 as a component of Container suse/sle-micro/5.5/toolbox:latest sudo-1.9.12p1-150500.7.10.1 as a component of Container suse/sle-micro/5.5:latest sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Azure-3P sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Azure-Basic sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Azure-Standard sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-Aliyun sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-GDC sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-CHOST-BYOS-SAP-CCloud sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-HPC-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-HPC-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-HPC-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-HPC-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Hardened-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Hardened-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Hardened-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-llc sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-Azure-ltd sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-llc sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Manager-Server-5-0-EC2-ltd sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-Micro-5-5-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Azure-3P sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Azure-LI-BYOS-Production sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Hardened-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Hardened-BYOS-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAP-Hardened-GCE sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAPCAL-Azure sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAPCAL-EC2 sudo-1.9.12p1-150500.7.10.1 as a component of Image SLES15-SP5-SAPCAL-GCE sudo-1.9.12p1-150500.7.10.1 as a component of SUSE Linux Enterprise Micro 5.5 Sudo before 1.9.15 might allow row hammer attacks (for authentication bypass or privilege escalation) because application logic sometimes is based on not equaling an error value (instead of equaling a success value), and because the values do not resist flips of a single bit. CVE-2023-42465 Container suse/sle-micro/5.5/toolbox:latest:sudo-1.9.12p1-150500.7.10.1 Container suse/sle-micro/5.5:latest:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Azure-3P:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Azure-Basic:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Azure-Standard:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-Aliyun:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-GDC:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-CHOST-BYOS-SAP-CCloud:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-HPC-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-HPC-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-HPC-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-HPC-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Hardened-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Hardened-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Hardened-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Proxy-5-0-BYOS:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-Azure-llc:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-Azure-ltd:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-BYOS:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-EC2-llc:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0-EC2-ltd:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Manager-Server-5-0:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-BYOS:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-Micro-5-5:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Azure-3P:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Azure-LI-BYOS-Production:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Azure-LI-BYOS:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS-Production:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Azure-VLI-BYOS:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Hardened-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Hardened-BYOS-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Hardened-BYOS-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Hardened-BYOS-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAP-Hardened-GCE:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAPCAL-Azure:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAPCAL-EC2:sudo-1.9.12p1-150500.7.10.1 Image SLES15-SP5-SAPCAL-GCE:sudo-1.9.12p1-150500.7.10.1 SUSE Linux Enterprise Micro 5.5:sudo-1.9.12p1-150500.7.10.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2024/suse-su-20240876-2/ https://www.suse.com/security/cve/CVE-2023-42465.html CVE-2023-42465 https://bugzilla.suse.com/1219026 SUSE Bug 1219026 https://bugzilla.suse.com/1221593 SUSE Bug 1221593 https://bugzilla.suse.com/1224872 SUSE Bug 1224872