RHSA-2024:0811 — Security Advisory

Red Hat Security Advisory: sudo security update

Loading…

Severity

Moderate

Red Hat Product Security

RHEL 8 / RHEL 9

Products

Official CSAF product identity

Published · February 14, 2024

Updated · June 25, 2026

Topic

A security update for sudo is now available for Red Hat Enterprise Linux 8 and 9.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.

Bug Fix(es) and Enhancement(s):

CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output
CVE-2023-28486 sudo: Sudo does not escape control characters in log messages
CVE-2023-42465 sudo: Targeted Corruption of Register and Stack Variables