Mageia alert MGASA-2016-0389 (sudo)

From:
    	     
 
Mageia Updates <buildsystem-daemon@mageia.org> 
To:
    	     
 
updates-announce@ml.mageia.org 
Subject:
    	     
 
[updates-announce] MGASA-2016-0389: Updated sudo packages fix security vulnerability 
Date:
    	     
 
Fri, 18 Nov 2016 00:41:26 +0100
Message-ID:
    	     
 
<20161117234126.682FD9F7A2@duvel.mageia.org>
MGASA-2016-0389 - Updated sudo packages fix security vulnerability

Publication date: 17 Nov 2016
URL: http://advisories.mageia.org/MGASA-2016-0389.html
Type: security
Affected Mageia releases: 5
CVE: CVE-2016-7076

Description:
It was discovered that the sudo noexec restriction could have been
bypassed if application run via sudo executed wordexp() C library function
with a user supplied argument. A local user permitted to run such
application via sudo with noexec restriction could possibly use this flaw
to execute arbitrary commands with elevated privileges (CVE-2016-7076).

References:
- https://bugs.mageia.org/show_bug.cgi?id=19762
- https://www.sudo.ws/alerts/noexec_wordexp.html
- https://www.sudo.ws/stable.html#1.8.18p1
-
https://lists.fedoraproject.org/archives/list/package-ann...
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7076

SRPMS:
- 5/core/sudo-1.8.18p1-1.mga5