[El-errata] ELSA-2013-1701 Low: Oracle Linux 6 sudo security, bug fix and enhancement update
Errata Announcements for Oracle Linux
el-errata at oss.oracle.com
Tue Nov 26 06:45:34 PST 2013
Oracle Linux Security Advisory ELSA-2013-1701
https://rhn.redhat.com/errata/RHSA-2013-1701.html
The following updated rpms for Oracle Linux 6 have been uploaded to the
Unbreakable Linux Network:
i386:
sudo-1.8.6p3-12.el6.i686.rpm
sudo-devel-1.8.6p3-12.el6.i686.rpm
x86_64:
sudo-1.8.6p3-12.el6.x86_64.rpm
sudo-devel-1.8.6p3-12.el6.i686.rpm
sudo-devel-1.8.6p3-12.el6.x86_64.rpm
SRPMS:
http://oss.oracle.com/ol6/SRPMS-updates/sudo-1.8.6p3-12.el6.src.rpm
Description of changes:
[1.8.6p3-12]
- added patches for CVE-2013-1775 CVE-2013-2777 CVE-2013-2776
Resolves: rhbz#1015355
[1.8.6p3-11]
- sssd: fixed a bug in ipa_hostname processing
Resolves: rhbz#853542
[1.8.6p3-10]
- sssd: fixed buffer size for the ipa_hostname value
Resolves: rhbz#853542
[1.8.6p3-9]
- sssd: match against ipa_hostname from sssd.conf too when
checking sudoHost
Resolves: rhbz#853542
[1.8.6p3-8]
- updated man-page
- fixed handling of RLIMIT_NPROC resource limit
- fixed alias cycle detection code
- added debug messages for tracing of netgroup matching
- fixed aborting on realloc when displaying allowed commands
- show the SUDO_USER in logs, if running commands as root
- sssd: filter netgroups in the sudoUser attribute
Resolves: rhbz#856901
Resolves: rhbz#947276
Resolves: rhbz#886648
Resolves: rhbz#994563
Resolves: rhbz#848111
Resolves: rhbz#994626
Resolves: rhbz#973228
Resolves: rhbz#880150
More information about the El-errata
mailing list