Linux · Security advisory · February 28, 2023

ELSA-2023-12143: Security update for 2 packages

ELSA-2023-12143, released February 28, 2023, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.5537

99th percentile

Fixed package versions

Product	Release	Fixed in
sudo	ol 8	0:1.8.6p3-29.0.4.el6_10.3
sudo-devel	ol 8	0:1.8.6p3-29.0.4.el6_10.3

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2023-22809	sudo: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permi...		7.8	0.5537	None reported

Also fixes CVE-2023-22809

ALAS2023-2023-106
sudo, sudo-debuginfo, sudo-debugsource and 5 more on amzn 2023
sudo 1.9.9-1ubuntu2.2
sudo on Ubuntu 22.04.1 LTS (jammy)
sudo-ldap 1.9.9-1ubuntu2.2
sudo-ldap on Ubuntu 22.04.1 LTS (jammy)
RLSA-2023:0284
sudo on rocky 8
RLSA-2023:0282
sudo on rocky 9
ALSA-2023:0282
sudo, sudo-python-plugin on almalinux 9
ALSA-2023:0284
sudo on almalinux 8
ELSA-2023-0282
sudo, sudo-python-plugin on ol 9

Vendor advisory

https://linux.oracle.com/errata/ELSA-2023-12143.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo