Advisory ROSA-SA-2021-1980

Software: sudo 1.8.23
OS: Cobalt 7.9

CVE-ID: CVE-2021-23239
CVE-Crit: LOW
CVE-DESC: The sudoedit personality in sudo before 1.9.5 can allow a local unprivileged user to perform arbitrary directory existence tests by winning the sudo_edit.c race condition when replacing a user-controlled directory with a symbolic link to an arbitrary path.
CVE-STATUS: default
CVE-REV: default

CVE-ID: CVE-2021-23240
CVE-Crit: HIGH
CVE-DESC: selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and elevate privileges by replacing a temporary file with a symbolic link to an arbitrary target file. This affects SELinux RBAC support for SELinux RBAC in permissive mode. Machines without SELinux are not vulnerable.
CVE-STATUS: default
CVE-REV: default