Synopsis:          Moderate: sudo security update

Advisory ID:       SLSA-2017:1574-1

Issue Date:        2017-06-23

CVE Numbers:       CVE-2017-1000368

--



Security Fix(es):



* It was found that the original fix for CVE-2017-1000367 was incomplete.

A flaw was found in the way sudo parsed tty information from the process

status file in the proc filesystem. A local user with privileges to

execute commands via sudo could use this flaw to escalate their privileges

to root. (CVE-2017-1000368)

--



SL6

  x86_64

    sudo-1.8.6p3-29.el6_9.x86_64.rpm

    sudo-debuginfo-1.8.6p3-29.el6_9.x86_64.rpm

    sudo-debuginfo-1.8.6p3-29.el6_9.i686.rpm

    sudo-devel-1.8.6p3-29.el6_9.i686.rpm

    sudo-devel-1.8.6p3-29.el6_9.x86_64.rpm

  i386

    sudo-1.8.6p3-29.el6_9.i686.rpm

    sudo-debuginfo-1.8.6p3-29.el6_9.i686.rpm

    sudo-devel-1.8.6p3-29.el6_9.i686.rpm

SL7

  x86_64

    sudo-1.8.6p7-23.el7_3.x86_64.rpm

    sudo-debuginfo-1.8.6p7-23.el7_3.x86_64.rpm

    sudo-debuginfo-1.8.6p7-23.el7_3.i686.rpm

    sudo-devel-1.8.6p7-23.el7_3.i686.rpm

    sudo-devel-1.8.6p7-23.el7_3.x86_64.rpm



- Scientific Linux Development Team