Security update for sudo SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2016:2891-1 Final 1 1 2016-11-23T14:34:44Z current 2016-11-23T14:34:44Z 2016-11-23T14:34:44Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for sudo This update for sudo fixes the following issues: - Fix two security vulnerabilities that allowed users to bypass sudo's NOEXEC functionality: * noexec bypass via system() and popen() [CVE-2016-7032, bsc#1007766] * noexec bypass via wordexp() [CVE-2016-7076, bsc#1007501] - The SSSD plugin would occasionally crash sudo with an 'internal error'. This issue has been fixed. [bsc#948973] - The SSSD plugin would occasionally apply @netgroups rules from LDAP to all users rather than the @netgroup. This issue is now fixed. [bsc#966755] - When the SSSD plugin was used and a local user ran sudo, an e-mail used to be sent to administrator because SSSD did not support sudo rules for local users. This message did not signify an error, however, it was only noise. [bsc#1008043] The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). slessp4-sudo-12852 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2016/suse-su-20162891-1/ Link for SUSE-SU-2016:2891-1 https://lists.suse.com/pipermail/sle-security-updates/2016-November/002413.html E-Mail link for SUSE-SU-2016:2891-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1007501 SUSE Bug 1007501 https://bugzilla.suse.com/1007766 SUSE Bug 1007766 https://bugzilla.suse.com/1008043 SUSE Bug 1008043 https://bugzilla.suse.com/948973 SUSE Bug 948973 https://bugzilla.suse.com/966755 SUSE Bug 966755 https://www.suse.com/security/cve/CVE-2016-7032/ SUSE CVE CVE-2016-7032 page https://www.suse.com/security/cve/CVE-2016-7076/ SUSE CVE CVE-2016-7076 page SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 sudo-1.7.6p2-0.29.1 sudo-1.7.6p2-0.29.1 as a component of SUSE Linux Enterprise Server 11 SP4 sudo-1.7.6p2-0.29.1 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function. CVE-2016-7032 SUSE Linux Enterprise Server 11 SP4:sudo-1.7.6p2-0.29.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:sudo-1.7.6p2-0.29.1 moderate 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162891-1/ https://www.suse.com/security/cve/CVE-2016-7032.html CVE-2016-7032 https://bugzilla.suse.com/1007501 SUSE Bug 1007501 https://bugzilla.suse.com/1007766 SUSE Bug 1007766 https://bugzilla.suse.com/1011975 SUSE Bug 1011975 https://bugzilla.suse.com/1011976 SUSE Bug 1011976 sudo before version 1.8.18p1 is vulnerable to a bypass in the sudo noexec restriction if application run via sudo executed wordexp() C library function with a user supplied argument. A local user permitted to run such application via sudo with noexec restriction could possibly use this flaw to execute arbitrary commands with elevated privileges. CVE-2016-7076 SUSE Linux Enterprise Server 11 SP4:sudo-1.7.6p2-0.29.1 SUSE Linux Enterprise Server for SAP Applications 11 SP4:sudo-1.7.6p2-0.29.1 moderate 6.6 AV:L/AC:M/Au:S/C:C/I:C/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2016/suse-su-20162891-1/ https://www.suse.com/security/cve/CVE-2016-7076.html CVE-2016-7076 https://bugzilla.suse.com/1007501 SUSE Bug 1007501 https://bugzilla.suse.com/1011975 SUSE Bug 1011975 https://bugzilla.suse.com/1011976 SUSE Bug 1011976