- Issued:
- 2013-03-08
- Updated:
- 2013-03-08
RHBA-2013:0616 - sudo bug fix update
Synopsis
sudo bug fix update
Type/Severity
Bug Fix Advisory
Topic
Updated sudo packages that fix two bugs are now available for Red Hat Enterprise Linux 5.
Description
The sudo (superuser do) utility allows system administrators to give certain users the ability to run commands as root.
This update fixes the following bugs:
- The "sudo -l" command did not parse the /etc/sudoers file correctly if it contained an Active Directory (AD) group. The file was parsed only up to the first AD group information and the command then failed with the following error message:
sudo: unable to cache group ADDOM\admingroup, already exists
With this update, the underlying code has been modified so the "sudo -l" command now parses the /etc/sudoers file as it is supposed to and no longer displays this error message. (BZ#916220)
- Previously, sudo did not escape the backslash characters contained in user names properly. Consequently, if a system used sudo integrated with LDAP or Active Directory as the primary authentication mechanism, users were not able to authenticate on that system. This patch modifies sudo to process LDAP and AD names correctly and the authentication process now functions as expected. (BZ#916232)
Users of sudo are advised to upgrade to these updated packages, which fix these bugs.
Solution
Before applying this update, make sure all previously-released errata relevant to your system have been applied.
This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258
Affected Products
| Product | Version | Arch |
|---|---|---|
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 5.9 | x86_64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 5.9 | ia64 |
| Red Hat Enterprise Linux for x86_64 - Extended Update Support | 5.9 | i386 |
| Red Hat Enterprise Linux for Power, big endian | 5 | ppc |
| Red Hat Enterprise Linux for Power, big endian - Extended Update Support | 5.9 | ppc |
| Red Hat Enterprise Linux for IBM z Systems | 5 | s390x |
| Red Hat Enterprise Linux for IBM z Systems - Extended Update Support | 5.9 | s390x |
| Red Hat Enterprise Linux Workstation | 5 | x86_64 |
| Red Hat Enterprise Linux Workstation | 5 | i386 |
| Red Hat Enterprise Linux Server | 5 | x86_64 |
| Red Hat Enterprise Linux Server | 5 | ia64 |
| Red Hat Enterprise Linux Server | 5 | i386 |
| Red Hat Enterprise Linux Server from RHUI | 5 | x86_64 |
| Red Hat Enterprise Linux Server from RHUI | 5 | i386 |
| Red Hat Enterprise Linux Server - Extended Update Support from RHUI | 5.9 | x86_64 |
| Red Hat Enterprise Linux Server - Extended Update Support from RHUI | 5.9 | i386 |
| Red Hat Enterprise Linux Server - AUS | 5.9 | x86_64 |
| Red Hat Enterprise Linux Server - AUS | 5.9 | ia64 |
| Red Hat Enterprise Linux Server - AUS | 5.9 | i386 |
| Red Hat Enterprise Linux Desktop | 5 | x86_64 |
| Red Hat Enterprise Linux Desktop | 5 | i386 |
Updated Packages
- sudo-debuginfo-1.7.2p1-22.el5_9.1.ppc.rpm
- sudo-1.7.2p1-22.el5_9.1.src.rpm
- sudo-debuginfo-1.7.2p1-22.el5_9.1.i386.rpm
- sudo-1.7.2p1-22.el5_9.1.i386.rpm
- sudo-debuginfo-1.7.2p1-22.el5_9.1.s390x.rpm
- sudo-1.7.2p1-22.el5_9.1.s390x.rpm
- sudo-1.7.2p1-22.el5_9.1.ia64.rpm
- sudo-debuginfo-1.7.2p1-22.el5_9.1.x86_64.rpm
- sudo-1.7.2p1-22.el5_9.1.x86_64.rpm
- sudo-debuginfo-1.7.2p1-22.el5_9.1.ia64.rpm
- sudo-1.7.2p1-22.el5_9.1.ppc.rpm
Fixes
(none)
CVEs
(none)
References
(none)
Additional information
- The Red Hat security contact is This content is not included.secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.
- Offline Security Data data is available for integration with other systems. See Offline Security Data API to get started.