CVE-2019-18634

mediumpriority · attend · 48EPSS 0.193 · 97 %ileexploit · PoCEURUUS
grimoire priorityP1 · Urgent
Exploitable?
Public exploit
16 exploits · PoC
Likely / severe?
19.3% (97th) EPSS
CVSS 4.6 · medium
Is it mine?
123 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · fstec_bdu · redhat_csaf

EPSS · scored 2026-10-27

In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in Linux Mint and elementary OS; however, it is NOT the default for upstream and many other packages, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

  • Fixedsudo-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-0:1.8.25p1-8.el8_1.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debuginfo-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debuginfo-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debuginfo-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debuginfo-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debugsource-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debugsource-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debugsource-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-debugsource-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0487
  • Fixedsudo-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-0:1.8.25p1-4.el8_0.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-debuginfo-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-debuginfo-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-debugsource-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-debugsource-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0509
  • Fixedsudo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0540
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Fixedsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:0726
  • Workaroundsudo-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-8.el8_1.1.src as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-8.el8_1.1.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-8.el8_1.1.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-8.el8_1.1.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-8.el8_1.1.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 8)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-4.el8_0.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-4.el8_0.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debugsource-0:1.8.25p1-4.el8_0.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v. 8.0)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.src as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Client Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux ComputeNode Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.23-4.el7_7.2.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 7)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.src as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-debuginfo-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.i686 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Desktop Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux HPC Node Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

  • Workaroundsudo-devel-0:1.8.6p3-29.el6_10.3.x86_64 as a component of Red Hat Enterprise Linux Workstation Optional (v. 6)redhat_csaf

    Please follow the steps bellow as mitigation: 1. Check the default properties set for sudo by running: ~~~ $ sudo -l [sudo] password for user: Matching Defaults entries for users on localhost: !visiblepw, pwfeedback, always_set_home, match_group_by_gid, always_query_group_plugin, env_reset, env_keep="COLORS DISPLAY HOSTNAME HISTSIZE KDEDIR LS_COLORS", env_keep+="MAIL PS1 PS2 QTDIR USERNAME LANG LC_ADDRESS LC_CTYPE", env_keep+="LC_COLLATE LC_IDENTIFICATION LC_MEASUREMENT LC_MESSAGES", env_keep+="LC_MONETARY LC_NAME LC_NUMERIC LC_PAPER LC_TELEPHONE", env_keep+="LC_TIME LC_ALL LANGUAGE LINGUAS _XKB_CHARSET XAUTHORITY", secure_path=/sbin\:/bin\:/usr/sbin\:/usr/bin ~~~ 2. If `pwfeedback` is enabled as shown above, edit your `/etc/sudoers` file, changing the line: ~~~ Defaults pwfeedback ~~~ To: ~~~ Defaults !pwfeedback ~~~ This will disable visual feedback on password typing, making sure the attack is not possible anymore.

02

cvss

Technical severity, 0–10. One row per scoring source.

7.8
010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 4.6–7.8

v2.04.6mediumAV:L/AC:L/Au:N/C:P/I:P/A:Pprimary · NVD / NIST USexploitability 3.9 · impact 6.4
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 1.8 · impact 5.9
v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU
v3.17.4highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Psecondary · CVSS-BT (t0sche)
v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Red Hat Product Security US
03

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-787USprimaryCWE-121USCWE-787US
04

exploits (16)

Public proof-of-concept and weaponised exploit code.

05

affected products (123)

Products and version ranges known to be affected.

showing 20 of 123
06

advisories (4)

Vendor and ecosystem advisories describing this.

  • RHSA-2020:0487Red Hat Security Advisory: sudo security update2020-02-14csaf · redhat_csafUS

    An update for sudo is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2020:0509Red Hat Security Advisory: sudo security update2020-02-14csaf · redhat_csafUS

    An update for sudo is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2020:0540Red Hat Security Advisory: sudo security update2020-02-19csaf · redhat_csafUS

    An update for sudo is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

  • RHSA-2020:0726Red Hat Security Advisory: sudo security update2020-03-05csaf · redhat_csafUS

    An update for sudo is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

07

also known as (4)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdfstec_bduredhat_csafNVDCVE.orgMITRE
published 2020-01-29modified 2026-06-17
10

references (93)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan