Security update for sudo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:0226-1 Final 1 1 2021-01-26T18:21:06Z current 2021-01-26T18:21:06Z 2021-01-26T18:21:06Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sudo This update for sudo fixes the following issues: - A Heap-based buffer overflow in sudo could be exploited to allow a user to gain root privileges [bsc#1181090,CVE-2021-3156] - It was possible for a user to test for the existence of a directory due to a Race Condition in `sudoedit` [bsc#1180684,CVE-2021-23239] - A Possible Symlink Attack vector existed in `sudoedit` if SELinux was running in permissive mode [bsc#1180685, CVE-2021-23240] - It was possible for a User to enable Debug Settings not Intended for them [bsc#1180687] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2021-226,Image SLES12-SP4-Azure-BYOS-2021-226,Image SLES12-SP4-EC2-HVM-BYOS-2021-226,Image SLES12-SP4-GCE-BYOS-2021-226,Image SLES12-SP4-OCI-BYOS-2021-226,Image SLES12-SP4-SAP-Azure-2021-226,Image SLES12-SP4-SAP-Azure-BYOS-2021-226,Image SLES12-SP4-SAP-Azure-LI-BYOS-Production-2021-226,Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production-2021-226,Image SLES12-SP4-SAP-EC2-HVM-2021-226,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2021-226,Image SLES12-SP4-SAP-GCE-2021-226,Image SLES12-SP4-SAP-GCE-BYOS-2021-226,Image SLES12-SP4-SAP-OCI-BYOS-2021-226,SUSE-2021-226,SUSE-OpenStack-Cloud-8-2021-226,SUSE-OpenStack-Cloud-9-2021-226,SUSE-OpenStack-Cloud-Crowbar-8-2021-226,SUSE-OpenStack-Cloud-Crowbar-9-2021-226,SUSE-SLE-SAP-12-SP3-2021-226,SUSE-SLE-SAP-12-SP4-2021-226,SUSE-SLE-SERVER-12-SP3-2021-226,SUSE-SLE-SERVER-12-SP3-BCL-2021-226,SUSE-SLE-SERVER-12-SP4-LTSS-2021-226,SUSE-Storage-5-2021-226 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/ Link for SUSE-SU-2021:0226-1 https://lists.suse.com/pipermail/sle-security-updates/2021-January/008249.html E-Mail link for SUSE-SU-2021:0226-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1180684 SUSE Bug 1180684 https://bugzilla.suse.com/1180685 SUSE Bug 1180685 https://bugzilla.suse.com/1180687 SUSE Bug 1180687 https://bugzilla.suse.com/1181090 SUSE Bug 1181090 https://www.suse.com/security/cve/CVE-2021-23239/ SUSE CVE CVE-2021-23239 page https://www.suse.com/security/cve/CVE-2021-23240/ SUSE CVE CVE-2021-23240 page https://www.suse.com/security/cve/CVE-2021-3156/ SUSE CVE CVE-2021-3156 page HPE Helion OpenStack 8 Image SLES12-SP4-Azure-BYOS Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-GCE-BYOS Image SLES12-SP4-OCI-BYOS Image SLES12-SP4-SAP-Azure Image SLES12-SP4-SAP-Azure-BYOS Image SLES12-SP4-SAP-Azure-LI-BYOS-Production Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS Image SLES12-SP4-SAP-GCE Image SLES12-SP4-SAP-GCE-BYOS Image SLES12-SP4-SAP-OCI-BYOS SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 sudo-1.8.20p2-3.20.1 sudo-devel-1.8.20p2-3.20.1 sudo-test-1.8.20p2-3.20.1 sudo-1.8.20p2-3.20.1 as a component of HPE Helion OpenStack 8 sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-Azure-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-GCE-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-OCI-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-Azure sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-Azure-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-Azure-LI-BYOS-Production sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-EC2-HVM sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-GCE sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-GCE-BYOS sudo-1.8.20p2-3.20.1 as a component of Image SLES12-SP4-SAP-OCI-BYOS sudo-1.8.20p2-3.20.1 as a component of SUSE Enterprise Storage 5 sudo-1.8.20p2-3.20.1 as a component of SUSE Linux Enterprise Server 12 SP3-BCL sudo-1.8.20p2-3.20.1 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS sudo-1.8.20p2-3.20.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS sudo-1.8.20p2-3.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 sudo-1.8.20p2-3.20.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 sudo-1.8.20p2-3.20.1 as a component of SUSE OpenStack Cloud 8 sudo-1.8.20p2-3.20.1 as a component of SUSE OpenStack Cloud 9 sudo-1.8.20p2-3.20.1 as a component of SUSE OpenStack Cloud Crowbar 8 sudo-1.8.20p2-3.20.1 as a component of SUSE OpenStack Cloud Crowbar 9 The sudoedit personality of Sudo before 1.9.5 may allow a local unprivileged user to perform arbitrary directory-existence tests by winning a sudo_edit.c race condition in replacing a user-controlled directory by a symlink to an arbitrary path. CVE-2021-23239 HPE Helion OpenStack 8:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-OCI-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-OCI-BYOS:sudo-1.8.20p2-3.20.1 SUSE Enterprise Storage 5:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-BCL:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 9:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 9:sudo-1.8.20p2-3.20.1 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/ https://www.suse.com/security/cve/CVE-2021-23239.html CVE-2021-23239 https://bugzilla.suse.com/1171722 SUSE Bug 1171722 https://bugzilla.suse.com/1180684 SUSE Bug 1180684 selinux_edit_copy_tfiles in sudoedit in Sudo before 1.9.5 allows a local unprivileged user to gain file ownership and escalate privileges by replacing a temporary file with a symlink to an arbitrary file target. This affects SELinux RBAC support in permissive mode. Machines without SELinux are not vulnerable. CVE-2021-23240 HPE Helion OpenStack 8:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-OCI-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-OCI-BYOS:sudo-1.8.20p2-3.20.1 SUSE Enterprise Storage 5:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-BCL:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 9:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 9:sudo-1.8.20p2-3.20.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/ https://www.suse.com/security/cve/CVE-2021-23240.html CVE-2021-23240 https://bugzilla.suse.com/1171722 SUSE Bug 1171722 https://bugzilla.suse.com/1180685 SUSE Bug 1180685 Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line argument that ends with a single backslash character. CVE-2021-3156 HPE Helion OpenStack 8:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-OCI-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-LI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure-VLI-BYOS-Production:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-Azure:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-EC2-HVM:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE-BYOS:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-GCE:sudo-1.8.20p2-3.20.1 Image SLES12-SP4-SAP-OCI-BYOS:sudo-1.8.20p2-3.20.1 SUSE Enterprise Storage 5:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-BCL:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP3-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server 12 SP4-LTSS:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:sudo-1.8.20p2-3.20.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud 9:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 8:sudo-1.8.20p2-3.20.1 SUSE OpenStack Cloud Crowbar 9:sudo-1.8.20p2-3.20.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20210226-1/ https://www.suse.com/security/cve/CVE-2021-3156.html CVE-2021-3156 https://bugzilla.suse.com/1180684 SUSE Bug 1180684 https://bugzilla.suse.com/1181090 SUSE Bug 1181090 https://bugzilla.suse.com/1181506 SUSE Bug 1181506 https://bugzilla.suse.com/1181657 SUSE Bug 1181657 https://bugzilla.suse.com/1183936 SUSE Bug 1183936