Lucene search

K
oraclelinuxOracleLinuxELSA-2020-1804
HistoryMay 05, 2020 - 12:00 a.m.

sudo security, bug fix, and enhancement update

2020-05-0500:00:00
linux.oracle.com
10

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

[1.8.29-5]

  • RHEL 8.2 ERRATUM
  • CVE-2019-18634
    Resolves: rhbz#1798093
    [1.8.29-4]
  • RHEL 8.2 ERRATUM
  • CVE-2019-19232
    Resolves: rhbz#1786987
    Resolves: rhbz#1796518
    [1.8.29-2]
  • RHEL 8.2 ERRATUM
  • rebase to 1.8.29
    Resolves: rhbz#1733961
    Resolves: rhbz#1651662
    [1.8.28p1-1]
  • RHEL 8.2 ERRATUM
  • rebase to 1.8.28p1
    Resolves: rhbz#1733961
  • fixed man page for always_set_home
    Resolves: rhbz#1576880
  • sudo does not work with notbefore/after
    Resolves: rhbz#1679508
  • NOTBEFORE showing value of sudoNotAfter Ldap attribute
    Resolves: rhbz#1715516
  • CVE-2019-14287 sudo
  • Privilege escalation via ‘Runas’ specification with ‘ALL’ keyword
    Resolves: rhbz#1760697

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C