Security update for sudo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:0407-1 Final 1 1 2020-02-19T08:31:56Z current 2020-02-19T08:31:56Z 2020-02-19T08:31:56Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sudo This update for sudo fixes the following issue: Security issue fixed: - CVE-2019-18634: Fixed a buffer overflow in the passphrase prompt that could occur when pwfeedback was enabled in /etc/sudoers (bsc#1162202). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2020-407,SUSE-OpenStack-Cloud-7-2020-407,SUSE-SLE-SAP-12-SP2-2020-407,SUSE-SLE-SERVER-12-SP2-2020-407,SUSE-SLE-SERVER-12-SP2-BCL-2020-407 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20200407-1/ Link for SUSE-SU-2020:0407-1 https://lists.suse.com/pipermail/sle-security-updates/2020-February/006498.html E-Mail link for SUSE-SU-2020:0407-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1162202 SUSE Bug 1162202 https://www.suse.com/security/cve/CVE-2019-18634/ SUSE CVE CVE-2019-18634 page SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 sudo-1.8.10p3-10.26.1 sudo-devel-1.8.10p3-10.26.1 sudo-test-1.8.10p3-10.26.1 sudo-1.8.10p3-10.26.1 as a component of SUSE Linux Enterprise Server 12 SP2-BCL sudo-1.8.10p3-10.26.1 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS sudo-1.8.10p3-10.26.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 sudo-1.8.10p3-10.26.1 as a component of SUSE OpenStack Cloud 7 In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. CVE-2019-18634 SUSE Linux Enterprise Server 12 SP2-BCL:sudo-1.8.10p3-10.26.1 SUSE Linux Enterprise Server 12 SP2-LTSS:sudo-1.8.10p3-10.26.1 SUSE Linux Enterprise Server for SAP Applications 12 SP2:sudo-1.8.10p3-10.26.1 SUSE OpenStack Cloud 7:sudo-1.8.10p3-10.26.1 critical To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20200407-1/ https://www.suse.com/security/cve/CVE-2019-18634.html CVE-2019-18634 https://bugzilla.suse.com/1162202 SUSE Bug 1162202