Security update for sudo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2656-1 Final 1 1 2019-10-14T15:02:27Z current 2019-10-14T15:02:27Z 2019-10-14T15:02:27Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sudo This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers (bsc#1153674). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container ses/6/cephcsi/cephcsi:latest-2019-2656,Container ses/6/rook/ceph:latest-2019-2656,Container ses/7/ceph/ceph:latest-2019-2656,Container ses/7/cephcsi/cephcsi:latest-2019-2656,Container ses/7/rook/ceph:latest-2019-2656,Container suse/sle-micro/5.0/toolbox:latest-2019-2656,Image SLES15-Azure-BYOS-2019-2656,Image SLES15-EC2-CHOST-HVM-BYOS-2019-2656,Image SLES15-EC2-HVM-BYOS-2019-2656,Image SLES15-GCE-BYOS-2019-2656,Image SLES15-OCI-BYOS-2019-2656,Image SLES15-SAP-Azure-2019-2656,Image SLES15-SAP-Azure-BYOS-2019-2656,Image SLES15-SAP-Azure-LI-BYOS-Production-2019-2656,Image SLES15-SAP-Azure-VLI-BYOS-Production-2019-2656,Image SLES15-SAP-EC2-HVM-2019-2656,Image SLES15-SAP-EC2-HVM-BYOS-2019-2656,Image SLES15-SAP-GCE-2019-2656,Image SLES15-SAP-GCE-BYOS-2019-2656,Image SLES15-SAP-OCI-BYOS-2019-2656,Image SLES15-SP1-Azure-BYOS-2019-2656,Image SLES15-SP1-Azure-HPC-BYOS-2019-2656,Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM-2019-2656,Image SLES15-SP1-CAP-Deployment-BYOS-GCE-2019-2656,Image SLES15-SP1-CHOST-BYOS-Azure-2019-2656,Image SLES15-SP1-CHOST-BYOS-EC2-2019-2656,Image SLES15-SP1-CHOST-BYOS-GCE-2019-2656,Image SLES15-SP1-EC2-HPC-HVM-BYOS-2019-2656,Image SLES15-SP1-EC2-HVM-BYOS-2019-2656,Image SLES15-SP1-GCE-BYOS-2019-2656,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy-2019-2656,Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server-2019-2656,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy-2019-2656,Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server-2019-2656,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy-2019-2656,Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server-2019-2656,Image SLES15-SP1-OCI-BYOS-2019-2656,Image SLES15-SP1-SAP-Azure-2019-2656,Image SLES15-SP1-SAP-Azure-BYOS-2019-2656,Image SLES15-SP1-SAP-Azure-LI-BYOS-Production-2019-2656,Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production-2019-2656,Image SLES15-SP1-SAP-EC2-HVM-2019-2656,Image SLES15-SP1-SAP-EC2-HVM-BYOS-2019-2656,Image SLES15-SP1-SAP-GCE-2019-2656,Image SLES15-SP1-SAP-GCE-BYOS-2019-2656,Image SLES15-SP1-SAP-OCI-BYOS-2019-2656,Image SLES15-SP1-SAPCAL-Azure-2019-2656,Image SLES15-SP1-SAPCAL-EC2-HVM-2019-2656,Image SLES15-SP1-SAPCAL-GCE-2019-2656,Image SLES15-SP2-Azure-Basic-2019-2656,Image SLES15-SP2-Azure-Standard-2019-2656,Image SLES15-SP2-BYOS-Azure-2019-2656,Image SLES15-SP2-BYOS-EC2-HVM-2019-2656,Image SLES15-SP2-BYOS-GCE-2019-2656,Image SLES15-SP2-CAP-Deployment-BYOS-Azure-2019-2656,Image SLES15-SP2-CHOST-BYOS-Aliyun-2019-2656,Image SLES15-SP2-CHOST-BYOS-Azure-2019-2656,Image SLES15-SP2-CHOST-BYOS-EC2-2019-2656,Image SLES15-SP2-CHOST-BYOS-GCE-2019-2656,Image SLES15-SP2-EC2-ECS-HVM-2019-2656,Image SLES15-SP2-EC2-HVM-2019-2656,Image SLES15-SP2-GCE-2019-2656,Image SLES15-SP2-HPC-Azure-2019-2656,Image SLES15-SP2-HPC-BYOS-Azure-2019-2656,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2019-2656,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2019-2656,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2019-2656,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2019-2656,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2019-2656,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2019-2656,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2019-2656,Image SLES15-SP2-SAP-Azure-2019-2656,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2019-2656,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2019-2656,Image SLES15-SP2-SAP-BYOS-Azure-2019-2656,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2019-2656,Image SLES15-SP2-SAP-BYOS-GCE-2019-2656,Image SLES15-SP2-SAP-EC2-HVM-2019-2656,Image SLES15-SP2-SAP-GCE-2019-2656,SUSE-2019-2656,SUSE-SLE-Module-Basesystem-15-2019-2656,SUSE-SLE-Module-Basesystem-15-SP1-2019-2656,SUSE-SLE-Module-Development-Tools-OBS-15-2019-2656,SUSE-SLE-Module-Development-Tools-OBS-15-SP1-2019-2656 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1/ Link for SUSE-SU-2019:2656-1 https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1.html E-Mail link for SUSE-SU-2019:2656-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1153674 SUSE Bug 1153674 https://www.suse.com/security/cve/CVE-2019-14287/ SUSE CVE CVE-2019-14287 page Container ses/6/cephcsi/cephcsi:latest Container ses/6/rook/ceph:latest Container ses/7/ceph/ceph:latest Container ses/7/cephcsi/cephcsi:latest Container ses/7/rook/ceph:latest Container suse/sle-micro/5.0/toolbox:latest Image SLES15-Azure-BYOS Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-GCE-BYOS Image SLES15-OCI-BYOS Image SLES15-SAP-Azure Image SLES15-SAP-Azure-BYOS Image SLES15-SAP-Azure-LI-BYOS-Production Image SLES15-SAP-Azure-VLI-BYOS-Production Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS Image SLES15-SAP-GCE Image SLES15-SAP-GCE-BYOS Image SLES15-SAP-OCI-BYOS Image SLES15-SP1-Azure-BYOS Image SLES15-SP1-Azure-HPC-BYOS Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM Image SLES15-SP1-CAP-Deployment-BYOS-GCE Image SLES15-SP1-CHOST-BYOS-Azure Image SLES15-SP1-CHOST-BYOS-EC2 Image SLES15-SP1-CHOST-BYOS-GCE Image SLES15-SP1-EC2-HPC-HVM-BYOS Image SLES15-SP1-EC2-HVM-BYOS Image SLES15-SP1-GCE-BYOS Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server Image SLES15-SP1-OCI-BYOS Image SLES15-SP1-SAP-Azure Image SLES15-SP1-SAP-Azure-BYOS Image SLES15-SP1-SAP-Azure-LI-BYOS-Production Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production Image SLES15-SP1-SAP-EC2-HVM Image SLES15-SP1-SAP-EC2-HVM-BYOS Image SLES15-SP1-SAP-GCE Image SLES15-SP1-SAP-GCE-BYOS Image SLES15-SP1-SAP-OCI-BYOS Image SLES15-SP1-SAPCAL-Azure Image SLES15-SP1-SAPCAL-EC2-HVM Image SLES15-SP1-SAPCAL-GCE Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CAP-Deployment-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-EC2-ECS-HVM Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 SUSE Linux Enterprise Module for Basesystem 15 SP1 sudo-1.8.22-4.6.1 sudo-devel-1.8.22-4.6.1 sudo-test-1.8.22-4.6.1 sudo-1.8.22-4.6.1 as a component of Container ses/6/cephcsi/cephcsi:latest sudo-1.8.22-4.6.1 as a component of Container ses/6/rook/ceph:latest sudo-1.8.22-4.6.1 as a component of Container ses/7/ceph/ceph:latest sudo-1.8.22-4.6.1 as a component of Container ses/7/cephcsi/cephcsi:latest sudo-1.8.22-4.6.1 as a component of Container ses/7/rook/ceph:latest sudo-1.8.22-4.6.1 as a component of Container suse/sle-micro/5.0/toolbox:latest sudo-1.8.22-4.6.1 as a component of Image SLES15-Azure-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-EC2-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-GCE-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-OCI-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-Azure-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-Azure-LI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-Azure-VLI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-GCE-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SAP-OCI-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Azure-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Azure-HPC-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-CAP-Deployment-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-CHOST-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-CHOST-BYOS-EC2 sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-CHOST-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-EC2-HPC-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-EC2-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-GCE-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-OCI-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-Azure-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-Azure-LI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-EC2-HVM-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-GCE-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAP-OCI-BYOS sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAPCAL-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAPCAL-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP1-SAPCAL-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Azure-Basic sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Azure-Standard sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-CAP-Deployment-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-EC2-ECS-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-HPC-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-EC2-HVM sudo-1.8.22-4.6.1 as a component of Image SLES15-SP2-SAP-GCE sudo-1.8.22-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 sudo-devel-1.8.22-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 sudo-1.8.22-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 sudo-devel-1.8.22-4.6.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP1 In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "sudo -u \#$((0xffffffff))" command. CVE-2019-14287 Container ses/6/cephcsi/cephcsi:latest:sudo-1.8.22-4.6.1 Container ses/6/rook/ceph:latest:sudo-1.8.22-4.6.1 Container ses/7/ceph/ceph:latest:sudo-1.8.22-4.6.1 Container ses/7/cephcsi/cephcsi:latest:sudo-1.8.22-4.6.1 Container ses/7/rook/ceph:latest:sudo-1.8.22-4.6.1 Container suse/sle-micro/5.0/toolbox:latest:sudo-1.8.22-4.6.1 Image SLES15-Azure-BYOS:sudo-1.8.22-4.6.1 Image SLES15-EC2-CHOST-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-EC2-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-GCE-BYOS:sudo-1.8.22-4.6.1 Image SLES15-OCI-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SAP-Azure-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SAP-Azure-LI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SAP-Azure-VLI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SAP-Azure:sudo-1.8.22-4.6.1 Image SLES15-SAP-EC2-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SAP-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SAP-GCE-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SAP-GCE:sudo-1.8.22-4.6.1 Image SLES15-SAP-OCI-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-Azure-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-Azure-HPC-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP1-CAP-Deployment-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP1-CHOST-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP1-CHOST-BYOS-EC2:sudo-1.8.22-4.6.1 Image SLES15-SP1-CHOST-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP1-EC2-HPC-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-EC2-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-GCE-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Proxy:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-Azure-BYOS-Server:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Proxy:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-EC2-HVM-BYOS-Server:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Proxy:sudo-1.8.22-4.6.1 Image SLES15-SP1-Manager-4-0-GCE-BYOS-Server:sudo-1.8.22-4.6.1 Image SLES15-SP1-OCI-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-Azure-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-Azure-LI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-Azure-VLI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-EC2-HVM-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-GCE-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAP-OCI-BYOS:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAPCAL-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAPCAL-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP1-SAPCAL-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-Azure-Basic:sudo-1.8.22-4.6.1 Image SLES15-SP2-Azure-Standard:sudo-1.8.22-4.6.1 Image SLES15-SP2-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-CAP-Deployment-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:sudo-1.8.22-4.6.1 Image SLES15-SP2-CHOST-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-CHOST-BYOS-EC2:sudo-1.8.22-4.6.1 Image SLES15-SP2-CHOST-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-EC2-ECS-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-HPC-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-HPC-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-BYOS-Azure:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-BYOS-GCE:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-EC2-HVM:sudo-1.8.22-4.6.1 Image SLES15-SP2-SAP-GCE:sudo-1.8.22-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:sudo-1.8.22-4.6.1 SUSE Linux Enterprise Module for Basesystem 15 SP1:sudo-devel-1.8.22-4.6.1 SUSE Linux Enterprise Module for Basesystem 15:sudo-1.8.22-4.6.1 SUSE Linux Enterprise Module for Basesystem 15:sudo-devel-1.8.22-4.6.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192656-1/ https://www.suse.com/security/cve/CVE-2019-14287.html CVE-2019-14287 https://bugzilla.suse.com/1153674 SUSE Bug 1153674 https://bugzilla.suse.com/1156093 SUSE Bug 1156093