SUSE-SU-2024:0797-2: Security update for sudo

Q: Should this update be deployed?

No. SUSE retracted this update because it changed some sudo functionality incorrectly. Review SUSE's subsequent guidance or replacement update before deploying it.

Q: Which environments are covered by the retracted update?

The listed affected products are SUSE Linux Enterprise 12 SP5 Server, High Performance Computing, Server for SAP Applications, and Software Development Kit on the specified architectures. The update also includes sudo, sudo-devel, sudo-debuginfo, and sudo-debugsource packages.

Q: What security issue was the update intended to address?

It was intended to make sudo less vulnerable to ROWHAMMER attacks associated with CVE-2023-42465. The provided information does not state exploit prerequisites, affected configurations, or mitigations other than the intended update.

Published Mar 8, 2024

Updated

This update for sudo fixes the following issues: NOTE: This update has been retracted as some sudo functionality was changed incorrectly. CVE-2023-42465: Try to make sudo less vulnerable to ROWHAMMER attacks (bsc#1219026).

Affected Software

16 affected componentsFixes available

All of the following

SUSE SUSE Linux Enterprise High Performance Computing 12 SP5 (aarch64 x86_64)

Any of the following

suse/sudo<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debugsource<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debuginfo<1.8.27-4.45.1

1.8.27-4.45.1

All of the following

SUSE SUSE Linux Enterprise Server 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/sudo<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debugsource<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debuginfo<1.8.27-4.45.1

1.8.27-4.45.1

All of the following

SUSE SUSE Linux Enterprise Server for SAP Applications 12 SP5 (ppc64le x86_64)

Any of the following

suse/sudo<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debugsource<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debuginfo<1.8.27-4.45.1

1.8.27-4.45.1

All of the following

SUSE SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 ppc64le s390x x86_64)

Any of the following

suse/sudo-devel<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debugsource<1.8.27-4.45.1

1.8.27-4.45.1

suse/sudo-debuginfo<1.8.27-4.45.1

1.8.27-4.45.1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade suse/sudo to a version that resolves this vulnerability.
Fixed in 1.8.27-4.45.1
Upgrade
Upgrade suse/sudo-debugsource to a version that resolves this vulnerability.
Fixed in 1.8.27-4.45.1
Upgrade
Upgrade suse/sudo-debuginfo to a version that resolves this vulnerability.
Fixed in 1.8.27-4.45.1
Upgrade
Upgrade suse/sudo-devel to a version that resolves this vulnerability.
Fixed in 1.8.27-4.45.1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SDK-12-SP5-2024-797=1
Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch SUSE-SLE-SERVER-12-SP5-2024-797=1

Event History

Mar 8, 2024

Advisory Published

via SUSE·12:36 PM

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2023-42465

Frequently Asked Questions

Should this update be deployed?

No. SUSE retracted this update because it changed some sudo functionality incorrectly. Review SUSE's subsequent guidance or replacement update before deploying it.

Which environments are covered by the retracted update?

The listed affected products are SUSE Linux Enterprise 12 SP5 Server, High Performance Computing, Server for SAP Applications, and Software Development Kit on the specified architectures. The update also includes sudo, sudo-devel, sudo-debuginfo, and sudo-debugsource packages.

What security issue was the update intended to address?

It was intended to make sudo less vulnerable to ROWHAMMER attacks associated with CVE-2023-42465. The provided information does not state exploit prerequisites, affected configurations, or mitigations other than the intended update.

SUSE-SU-2024:0797-2: Security update for sudo

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Should this update be deployed?

Which environments are covered by the retracted update?

What security issue was the update intended to address?

Company

Resources

Contact

Frequently Asked Questions

Should this update be deployed?

Which environments are covered by the retracted update?

What security issue was the update intended to address?