Lucene search

K
suseSuseSUSE-SU-2017:1627-1
HistoryJun 20, 2017 - 6:10 p.m.

Security update for sudo (important)

2017-06-2018:10:44
lists.opensuse.org
21

0.002 Low

EPSS

Percentile

58.2%

This update for sudo fixes the following issues:

  • CVE-2017-1000368: A follow-up fix to CVE-2017-1000367, the Linux process
    name could also contain a newline, which could be used to trick sudo to
    read/write to an arbitrary open terminal. (bsc#1042146)

Also the following non security bug was fixed:

  • Link the "system_group" plugin with sudo_util library to resolve the
    missing sudo_dso_findsym symbol (bsc#1034560)