FEDORA-2017-facd994774 — security update for sudo

stable

sudo-1.8.20p2-1.fc24

FEDORA-2017-facd994774 created by mildew 7 years ago for Fedora 24

update to 1.8.20p2
- added sudo package to dnf/yum protected packages

update to 1.8.20p1
fixes CVE-2017-1000367

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2017-facd994774

This update has been submitted for testing by mildew.

7 years ago

This update has obsoleted sudo-1.8.20p1-1.fc24, and has inherited its bugs and notes.

7 years ago

This update has been pushed to testing.

7 years ago

cserpentis commented & provided feedback 7 years ago

karma

works fine for me in a VM

samoht0 commented & provided feedback 7 years ago

karma

LGTM

This update has been submitted for stable by mildew.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Severity

urgent

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

Builds

sudo-1.8.20p2-1.fc24

BZ#1452941 Removing vim-minimal package also removes sudo

BZ#1453074 CVE-2017-1000367 sudo: Privilege escalation in via improper get_process_ttyname() parsing

BZ#1456884 CVE-2017-1000367 sudo: sudo: Privilege escalation in via improper get_process_ttyname() parsing [fedora-all]

BZ#1457015 sudo-1.8.20p1 is available

BZ#1457587 sudo-1.8.20p2 is available

sudo-1.8.20p2-1.fc24

Automated Test Results

None