CVE-2026-35535
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during...
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- High
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
CVE-2026-35535- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-271, CWE-272
- Updated
- 2026-11-02
EUVDEUVD-2026-18571
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
EUVD-2026-18571- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-g5fc-f834-rcr2
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during...
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
GHSA-g5fc-f834-rcr2- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-271, CWE-272
- Updated
- 2026-11-02
NVD
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
CVE-2026-35535- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-271, CWE-272
- Updated
- 2026-11-02
OSVBELL-CVE-2026-35535
7.8
- Record
BELL-CVE-2026-35535- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSV
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
CVE-2026-35535- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Weakness
- CWE-271
- Updated
- 2026-11-02
Show 48 moreShow less
OSVDEBIAN-CVE-2026-35535
7.8
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
DEBIAN-CVE-2026-35535- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1908
7.4
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)
- Record
OESA-2026-1908- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1996
7.4
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)
- Record
OESA-2026-1996- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1997
7.4
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)
- Record
OESA-2026-1997- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1998
7.4
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)
- Record
OESA-2026-1998- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVOESA-2026-1999
7.4
sudo security update
Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Security Fix(es):
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.(CVE-2026-35535)
- Record
OESA-2026-1999- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:10758
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:10758- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:11521
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:11521- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:12310
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:12310- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13731
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13731- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13888
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13888- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13889
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13889- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13891
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13891- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13892
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13892- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13895
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13895- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:13896
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:13896- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:14228
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:14228- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:14437
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:14437- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:19067
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:19067- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:19220
7.4
Red Hat Security Advisory: sudo security update
- Record
RHSA-2026:19220- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2026:65569
7.8
Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update
- Record
RHSA-2026:65569- CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:10758
7.4
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:10758- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:11521
7.4
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:11521- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:12310
7.4
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:12310- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:19067
7.4
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:19067- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVRLSA-2026:19220
7.4
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2026:19220- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2026-35535
7.4
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
UBUNTU-CVE-2026-35535- CVSS 3.1
- 7.4 High
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 3.1
- 7.8 High
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
OSVALSA-2026:10758 No score
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:10758- Updated
- 2026-11-02
OSVALSA-2026:11521 No score
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:11521- Updated
- 2026-11-02
OSVALSA-2026:12310 No score
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:12310- Updated
- 2026-11-02
OSVALSA-2026:19067 No score
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:19067- Updated
- 2026-11-02
OSVALSA-2026:19220 No score
Important: sudo security update
The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
- sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2026:19220- Updated
- 2026-11-02
OSVAZL-81861 No score
CVE-2026-35535 affecting package sudo for versions less than 1.9.17-2
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
- Record
AZL-81861- Updated
- 2026-11-05
OSVCLSA-2026-1777939719 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: make privilege drop failure fatal before running the mailer
- Record
CLSA-2026-1777939719- Updated
- 2026-11-02
OSVCLSA-2026-1777940187 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: make privilege drop failure fatal before running the mailer
- Record
CLSA-2026-1777940187- Updated
- 2026-11-02
OSVCLSA-2026-1778002733 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: make privilege drop failure fatal before running the mailer
- Record
CLSA-2026-1778002733- Updated
- 2026-11-02
OSVCLSA-2026-1778005006 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: failure to drop privileges before running mailer
- Record
CLSA-2026-1778005006- Updated
- 2026-11-02
OSVCLSA-2026-1778073563 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: drop group privileges and supplementary groups before running the mailer in exec_mailer(), make setuid/setgid/setgroups failures fatal, and pass user gid alongside uid when NO_ROOT_MAILER is defined
- Record
CLSA-2026-1778073563- Updated
- 2026-11-02
OSVCLSA-2026-1780564611 No score
sudo: Fix of 3 CVEs
- CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation
- Record
CLSA-2026-1780564611- Updated
- 2026-11-02
OSVCLSA-2026-1780564889 No score
sudo: Fix of 4 CVEs
- CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation
- Record
CLSA-2026-1780564889- Updated
- 2026-11-02
OSVCLSA-2026-1780567799 No score
Fix CVE(s): CVE-2026-35535
- SECURITY UPDATE: make a privilege drop failure before running the mailer fatal
- debian/patches/CVE-2026-35535.patch: make a privilege drop failure before running the mailer fatal
- CVE-2026-35535
- Record
CLSA-2026-1780567799- Updated
- 2026-11-02
OSVCLSA-2026-1780574678 No score
sudo: Fix of CVE-2026-35535
- CVE-2026-35535: make privilege change before running the mailer fatal to prevent privilege escalation
- Record
CLSA-2026-1780574678- Updated
- 2026-11-02
OSVCLSA-2026-1781342947 No score
Fix CVE(s): CVE-2026-35535
- SECURITY UPDATE: privilege escalation via mailer on privilege-drop failure
- debian/patches/CVE-2026-35535.patch: make a setuid/setgid/setgroups failure during the privilege drop before running the mailer fatal
- CVE-2026-35535
- Record
CLSA-2026-1781342947- Updated
- 2026-11-02
OSVCLSA-2026-1781343160 No score
Fix CVE(s): CVE-2026-35535
- SECURITY UPDATE: privilege escalation via mailer on privilege-drop failure
- debian/patches/CVE-2026-35535.patch: make a setuid/setgid/setgroups failure during the privilege drop before running the mailer fatal
- CVE-2026-35535
- Record
CLSA-2026-1781343160- Updated
- 2026-11-02
OSVCLSA-2026-1790600964 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790600964- Updated
- 2026-11-02
OSVCLSA-2026-1790601456 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790601456- Updated
- 2026-11-02
OSVCLSA-2026-1790606589 No score
sudo: Fix of 7 CVEs
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- Record
CLSA-2026-1790606589- Updated
- 2026-11-02
OSVMGASA-2026-0211 No score
Updated sudo packages fix security vulnerability
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation. (CVE-2026-35535)
- Record
MGASA-2026-0211- Updated
- 2026-11-02
Affected products
- sudo project sudo
- sudo project sudo
- red hat ai inference server 3.3
- red hat enterprise linux 10
- red hat enterprise linux 10.0 extended update support
- red hat enterprise linux 6 extended lifecycle support - extension
- red hat enterprise linux 7 extended lifecycle support
- red hat enterprise linux 8
- red hat enterprise linux 8.6 advanced mission critical update support
- red hat enterprise linux 8.6 telecommunications update service
- red hat enterprise linux 8.6 update services for sap solutions
- red hat enterprise linux 8.8 telecommunications update service
Show 17 moreShow less
- red hat enterprise linux 8.8 update services for sap solutions
- red hat enterprise linux 9
- red hat enterprise linux 9.0 update services for sap solutions
- red hat enterprise linux 9.2 update services for sap solutions
- red hat enterprise linux 9.4 extended update support
- red hat enterprise linux 9.6 extended update support
- red hat openshift container platform 4.12
- red hat openshift container platform 4.13
- red hat openshift container platform 4.14
- red hat openshift container platform 4.15
- red hat openshift container platform 4.16
- red hat openshift container platform 4.17
- red hat openshift container platform 4.18
- red hat openshift container platform 4.19
- red hat update infrastructure 5
- siemens ruggedcom rst2428p
- siemens sinec os
Affected packages
| Package | Affected | Fixed |
|---|---|---|
sudoAlmaLinux:10 |
before 1.9.15-10.p5.el10_1 | 1.9.15-10.p5.el10_1 |
sudo-python-pluginAlmaLinux:10 |
before 1.9.15-10.p5.el10_1 | 1.9.15-10.p5.el10_1 |
sudoAlmaLinux:8 |
before 1.9.5p2-1.el8_10.5 | 1.9.5p2-1.el8_10.5 |
sudoAlmaLinux:9 |
before 1.9.5p2-15.el9_7 | 1.9.5p2-15.el9_7 |
sudo-python-pluginAlmaLinux:9 |
before 1.9.5p2-15.el9_7 | 1.9.5p2-15.el9_7 |
sudoAlmaLinux:10 |
before 1.9.17-4.p2.el10_2 | 1.9.17-4.p2.el10_2 |
sudo-python-pluginAlmaLinux:10 |
before 1.9.17-4.p2.el10_2 | 1.9.17-4.p2.el10_2 |
sudoAlmaLinux:9 |
before 1.9.17p2-3.el9_8 | 1.9.17p2-3.el9_8 |
sudo-python-pluginAlmaLinux:9 |
before 1.9.17p2-3.el9_8 | 1.9.17p2-3.el9_8 |
sudoAzure Linux:3 |
before 1.9.17-2 | 1.9.17-2 |
Show 159 moreShow less
| Package | Affected | Fixed |
|---|---|---|
sudoAlpaquita:23 |
1.9.12_p1-r1 up to 1.9.15_p5-r2 | 1.9.15_p5-r2 |
sudoAlpaquita:25 |
1.9.16_p2-r1 up to 1.9.17_p2-r1 | 1.9.17_p2-r1 |
sudoAlpaquita:stream |
1.9.13_p3-r0 up to 1.9.17_p2-r1 | 1.9.17_p2-r1 |
sudoTuxCare:CentOS:8.4 |
before 1.8.29-7.el8_4.1.tuxcare.els5 | 1.8.29-7.el8_4.1.tuxcare.els5 |
sudo-develTuxCare:CentOS:8.4 |
before 1.8.29-7.el8_4.1.tuxcare.els5 | 1.8.29-7.el8_4.1.tuxcare.els5 |
sudoTuxCare:CentOS:8.5 |
before 1.8.29-7.el8_4.1.tuxcare.els5 | 1.8.29-7.el8_4.1.tuxcare.els5 |
sudo-develTuxCare:CentOS:8.5 |
before 1.8.29-7.el8_4.1.tuxcare.els5 | 1.8.29-7.el8_4.1.tuxcare.els5 |
sudoTuxCare:CentOS-Stream:8 |
before 1.9.5p2-1.el8.tuxcare.els2 | 1.9.5p2-1.el8.tuxcare.els2 |
sudo-develTuxCare:CentOS-Stream:8 |
before 1.9.5p2-1.el8.tuxcare.els2 | 1.9.5p2-1.el8.tuxcare.els2 |
sudoTuxCare:AlmaLinux:9.2 |
before 1.9.5p2-9.el9.tuxcare.els4 | 1.9.5p2-9.el9.tuxcare.els4 |
sudo-develTuxCare:AlmaLinux:9.2 |
before 1.9.5p2-9.el9.tuxcare.els4 | 1.9.5p2-9.el9.tuxcare.els4 |
sudo-python-pluginTuxCare:AlmaLinux:9.2 |
before 1.9.5p2-9.el9.tuxcare.els4 | 1.9.5p2-9.el9.tuxcare.els4 |
sudoTuxCare:AlmaLinux:9.6 |
before 1.9.5p2-10.el9_6.2.tuxcare.els1 | 1.9.5p2-10.el9_6.2.tuxcare.els1 |
sudo-develTuxCare:AlmaLinux:9.6 |
before 1.9.5p2-10.el9_6.2.tuxcare.els1 | 1.9.5p2-10.el9_6.2.tuxcare.els1 |
sudo-python-pluginTuxCare:AlmaLinux:9.6 |
before 1.9.5p2-10.el9_6.2.tuxcare.els1 | 1.9.5p2-10.el9_6.2.tuxcare.els1 |
sudoTuxCare:OracleLinux:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudo-develTuxCare:OracleLinux:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudoTuxCare:RHEL:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudo-develTuxCare:RHEL:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudoTuxCare:Debian:10 |
before 1.8.27-1+deb10u6+tuxcare.els2 | 1.8.27-1+deb10u6+tuxcare.els2 |
sudo-ldapTuxCare:Debian:10 |
before 1.8.27-1+deb10u6+tuxcare.els2 | 1.8.27-1+deb10u6+tuxcare.els2 |
sudoTuxCare:CentOS:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudo-develTuxCare:CentOS:7 |
before 1.8.23-10.0.1.el7_9.3.tuxcare.els3 | 1.8.23-10.0.1.el7_9.3.tuxcare.els3 |
sudoTuxCare:Ubuntu:18.04 |
before 1.8.21p2-3ubuntu1.6+tuxcare.els3 | 1.8.21p2-3ubuntu1.6+tuxcare.els3 |
sudo-ldapTuxCare:Ubuntu:18.04 |
before 1.8.21p2-3ubuntu1.6+tuxcare.els3 | 1.8.21p2-3ubuntu1.6+tuxcare.els3 |
sudoTuxCare:Ubuntu:16.04 |
before 1.8.16-0ubuntu1.11+tuxcare.els4 | 1.8.16-0ubuntu1.11+tuxcare.els4 |
sudo-ldapTuxCare:Ubuntu:16.04 |
before 1.8.16-0ubuntu1.11+tuxcare.els4 | 1.8.16-0ubuntu1.11+tuxcare.els4 |
sudoTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:RHEL:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:OracleLinux:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudo-develTuxCare:CentOS:7 From an advisory covering 7 CVEs |
before 1.8.23-10.0.3.el7_9.3.tuxcare.els1 | 1.8.23-10.0.3.el7_9.3.tuxcare.els1 |
sudoDebian:12 |
before 1.9.13p3-1+deb12u4, plus listed versions 1.9.13p3-11.9.13p3-1+deb12u11.9.13p3-1+deb12u21.9.13p3-1+deb12u3 |
1.9.13p3-1+deb12u4 |
sudoDebian:13 |
before 1.9.16p2-3+deb13u2, plus listed versions 1.9.16p2-31.9.16p2-3+deb13u1 |
1.9.16p2-3+deb13u2 |
sudoDebian:14 |
before 1.9.17p2-5, plus listed versions 1.9.16p2-31.9.17p1-11.9.17p2-11.9.17p2-1exp11.9.17p2-21.9.17p2-31.9.17p2-4 |
1.9.17p2-5 |
sudoMageia:9 |
before 1.9.15p5-1.2.mga9 | 1.9.15p5-1.2.mga9 |
sudoopenEuler:24.03-LTS-SP3 |
before 1.9.15p5-6.oe2403sp3 | 1.9.15p5-6.oe2403sp3 |
sudoopenEuler:22.03-LTS-SP4 |
before 1.9.8p2-20.oe2203sp4 | 1.9.8p2-20.oe2203sp4 |
sudoopenEuler:24.03-LTS |
before 1.9.15p5-6.oe2403 | 1.9.15p5-6.oe2403 |
sudoopenEuler:24.03-LTS-SP1 |
before 1.9.15p5-6.oe2403sp1 | 1.9.15p5-6.oe2403sp1 |
sudoopenEuler:20.03-LTS-SP4 |
before 1.9.2-19.oe2003sp4 | 1.9.2-19.oe2003sp4 |
sudo-debuginfoRed Hat:enterprise_linux:10.1 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudo-debugsourceRed Hat:enterprise_linux:10.1 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudo-python-pluginRed Hat:enterprise_linux:10.1 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:10.1 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudoRed Hat:enterprise_linux:10.1 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudoRed Hat:enterprise_linux:8::baseos |
before 0:1.9.5p2-1.el8_10.5 | 0:1.9.5p2-1.el8_10.5 |
sudo-debuginfoRed Hat:enterprise_linux:8::baseos |
before 0:1.9.5p2-1.el8_10.5 | 0:1.9.5p2-1.el8_10.5 |
sudo-debugsourceRed Hat:enterprise_linux:8::baseos |
before 0:1.9.5p2-1.el8_10.5 | 0:1.9.5p2-1.el8_10.5 |
sudo-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-python-pluginRed Hat:enterprise_linux:9::appstream |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudo-debuginfoRed Hat:rhel_e4s:9.0::appstream |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-debugsourceRed Hat:rhel_e4s:9.0::appstream |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-python-pluginRed Hat:rhel_e4s:9.0::appstream |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-python-plugin-debuginfoRed Hat:rhel_e4s:9.0::appstream |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudoRed Hat:rhel_e4s:9.0::baseos |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-debuginfoRed Hat:rhel_e4s:9.0::baseos |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-debugsourceRed Hat:rhel_e4s:9.0::baseos |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-python-plugin-debuginfoRed Hat:rhel_e4s:9.0::baseos |
before 0:1.9.5p2-7.el9_0.6 | 0:1.9.5p2-7.el9_0.6 |
sudo-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.9.15-8.p5.el10_0.3 | 0:1.9.15-8.p5.el10_0.3 |
sudo-debugsourceRed Hat:enterprise_linux_eus:10.0 |
before 0:1.9.15-8.p5.el10_0.3 | 0:1.9.15-8.p5.el10_0.3 |
sudo-python-pluginRed Hat:enterprise_linux_eus:10.0 |
before 0:1.9.15-8.p5.el10_0.3 | 0:1.9.15-8.p5.el10_0.3 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.9.15-8.p5.el10_0.3 | 0:1.9.15-8.p5.el10_0.3 |
sudoRed Hat:enterprise_linux_eus:10.0 |
before 0:1.9.15-8.p5.el10_0.3 | 0:1.9.15-8.p5.el10_0.3 |
sudo-debuginfoRed Hat:rhel_eus:9.6::appstream |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-debugsourceRed Hat:rhel_eus:9.6::appstream |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-python-pluginRed Hat:rhel_eus:9.6::appstream |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.6::appstream |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudoRed Hat:rhel_eus:9.6::baseos |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-debuginfoRed Hat:rhel_eus:9.6::baseos |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-debugsourceRed Hat:rhel_eus:9.6::baseos |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.6::baseos |
before 0:1.9.5p2-10.el9_6.3 | 0:1.9.5p2-10.el9_6.3 |
sudo-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-debugsourceRed Hat:rhel_e4s:9.2::appstream |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-python-pluginRed Hat:rhel_e4s:9.2::appstream |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-python-plugin-debuginfoRed Hat:rhel_e4s:9.2::appstream |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudoRed Hat:rhel_e4s:9.2::baseos |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-debugsourceRed Hat:rhel_e4s:9.2::baseos |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudo-python-plugin-debuginfoRed Hat:rhel_e4s:9.2::baseos |
before 0:1.9.5p2-9.el9_2.4 | 0:1.9.5p2-9.el9_2.4 |
sudoRed Hat:rhel_e4s:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudo-debuginfoRed Hat:rhel_e4s:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudo-debugsourceRed Hat:rhel_e4s:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudoRed Hat:rhel_tus:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudo-debuginfoRed Hat:rhel_tus:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudo-debugsourceRed Hat:rhel_tus:8.8::baseos |
before 0:1.9.5p2-1.el8_8.3 | 0:1.9.5p2-1.el8_8.3 |
sudoRed Hat:rhel_els:7 |
before 0:1.8.23-10.el7_9.5 | 0:1.8.23-10.el7_9.5 |
sudo-debuginfoRed Hat:rhel_els:7 |
before 0:1.8.23-10.el7_9.5 | 0:1.8.23-10.el7_9.5 |
sudo-develRed Hat:rhel_els:7 |
before 0:1.8.23-10.el7_9.5 | 0:1.8.23-10.el7_9.5 |
sudoRed Hat:rhel_els:6 |
before 0:1.8.6p3-29.el6_10.8 | 0:1.8.6p3-29.el6_10.8 |
sudo-debuginfoRed Hat:rhel_els:6 |
before 0:1.8.6p3-29.el6_10.8 | 0:1.8.6p3-29.el6_10.8 |
sudo-develRed Hat:rhel_els:6 |
before 0:1.8.6p3-29.el6_10.8 | 0:1.8.6p3-29.el6_10.8 |
sudoRed Hat:rhel_aus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debuginfoRed Hat:rhel_aus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debugsourceRed Hat:rhel_aus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudoRed Hat:rhel_e4s:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debuginfoRed Hat:rhel_e4s:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debugsourceRed Hat:rhel_e4s:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudoRed Hat:rhel_tus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debuginfoRed Hat:rhel_tus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debugsourceRed Hat:rhel_tus:8.6::baseos |
before 0:1.9.5p2-1.el8_6.3 | 0:1.9.5p2-1.el8_6.3 |
sudo-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-python-pluginRed Hat:rhel_eus:9.4::appstream |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudoRed Hat:rhel_eus:9.4::baseos |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-debugsourceRed Hat:rhel_eus:9.4::baseos |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-python-plugin-debuginfoRed Hat:rhel_eus:9.4::baseos |
before 0:1.9.5p2-10.el9_4.3 | 0:1.9.5p2-10.el9_4.3 |
sudo-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudo-debugsourceRed Hat:enterprise_linux:10.2 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudo-python-pluginRed Hat:enterprise_linux:10.2 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:10.2 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudoRed Hat:enterprise_linux:10.2 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudo-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-python-pluginRed Hat:enterprise_linux:9::appstream |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-debugsourceRed Hat:enterprise_linux:9::baseos |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudo-python-plugin-debuginfoRed Hat:enterprise_linux:9::baseos |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudoRed Hat:hummingbird:1 From an advisory covering 2 CVEs |
before 0:1.9.17-16.p2.1.hum1 | 0:1.9.17-16.p2.1.hum1 |
sudo-develRed Hat:hummingbird:1 From an advisory covering 2 CVEs |
before 0:1.9.17-16.p2.1.hum1 | 0:1.9.17-16.p2.1.hum1 |
sudo-logsrvdRed Hat:hummingbird:1 From an advisory covering 2 CVEs |
before 0:1.9.17-16.p2.1.hum1 | 0:1.9.17-16.p2.1.hum1 |
sudo-python-pluginRed Hat:hummingbird:1 From an advisory covering 2 CVEs |
before 0:1.9.17-16.p2.1.hum1 | 0:1.9.17-16.p2.1.hum1 |
sudoRocky Linux:10 |
before 0:1.9.15-10.p5.el10_1 | 0:1.9.15-10.p5.el10_1 |
sudoRocky Linux:8 |
before 0:1.9.5p2-1.el8_10.5 | 0:1.9.5p2-1.el8_10.5 |
sudoRocky Linux:9 |
before 0:1.9.5p2-15.el9_7 | 0:1.9.5p2-15.el9_7 |
sudoRocky Linux:10 |
before 0:1.9.17-4.p2.el10_2 | 0:1.9.17-4.p2.el10_2 |
sudoRocky Linux:9 |
before 0:1.9.17p2-3.el9_8 | 0:1.9.17p2-3.el9_8 |
sudoSUSE:Linux Enterprise Micro 5.5 |
before 1.9.12p1-150500.7.16.1 | 1.9.12p1-150500.7.16.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOS |
before 1.9.12p1-150500.7.16.1 | 1.9.12p1-150500.7.16.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP5-LTSS |
before 1.9.12p1-150500.7.16.1 | 1.9.12p1-150500.7.16.1 |
sudoSUSE:Linux Enterprise Server 15 SP5-LTSS |
before 1.9.12p1-150500.7.16.1 | 1.9.12p1-150500.7.16.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP5 |
before 1.9.12p1-150500.7.16.1 | 1.9.12p1-150500.7.16.1 |
sudoSUSE:Linux Enterprise Micro 5.3 |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise Micro 5.4 |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise Server 15 SP4-LTSS |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP4 |
before 1.9.9-150400.4.42.1 | 1.9.9-150400.4.42.1 |
sudoSUSE:Linux Enterprise Module for Basesystem 15 SP7 |
before 1.9.15p5-150600.3.15.1 | 1.9.15p5-150600.3.15.1 |
sudoSUSE:Linux Enterprise Server 15 SP6-LTSS |
before 1.9.15p5-150600.3.15.1 | 1.9.15p5-150600.3.15.1 |
sudoSUSE:Linux Enterprise Server for SAP Applications 15 SP6 |
before 1.9.15p5-150600.3.15.1 | 1.9.15p5-150600.3.15.1 |
sudoSUSE:Linux Micro 6.1 |
before 1.9.15p5-slfo.1.1_3.1 | 1.9.15p5-slfo.1.1_3.1 |
sudoSUSE:Linux Micro 6.2 |
before 1.9.17p1-160000.3.1 | 1.9.17p1-160000.3.1 |
sudoUbuntu:22.04:LTS |
before 1.9.9-1ubuntu2.6, plus listed versions 1.9.5p2-3ubuntu21.9.9-1ubuntu21.9.9-1ubuntu2.11.9.9-1ubuntu2.21.9.9-1ubuntu2.31.9.9-1ubuntu2.41.9.9-1ubuntu2.5 |
1.9.9-1ubuntu2.6 |
sudoUbuntu:24.04:LTS |
before 1.9.15p5-3ubuntu5.24.04.2, plus listed versions 1.9.14p2-1ubuntu11.9.15p5-3ubuntu11.9.15p5-3ubuntu31.9.15p5-3ubuntu41.9.15p5-3ubuntu51.9.15p5-3ubuntu5.24.04.1 |
1.9.15p5-3ubuntu5.24.04.2 |
sudoUbuntu:25.10 |
before 1.9.17p2-1ubuntu1.1, plus listed versions 1.9.16p2-1ubuntu11.9.16p2-1ubuntu41.9.16p2-3ubuntu21.9.17p2-1ubuntu1 |
1.9.17p2-1ubuntu1.1 |
sudoopenSUSE:Tumbleweed |
before 1.9.17p2-2.1 | 1.9.17p2-2.1 |
sudoopenSUSE:Leap 16.0 |
before 1.9.17p1-160000.3.1 | 1.9.17p1-160000.3.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| facts | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2026-35535 is a high vulnerability (CVSS 7.4) in Sudo Project Sudo, published April 3, 2026. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.18%, the 7th percentile. Fixed in sudo 1.9.15-10.p5.el10_1.
References
github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69
qualys.com/2026/03/10/crack-armor.txt
bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042
bugs.debian.org/1130593
cert-portal.siemens.com/productcert/html/ssa-253495.html
lists.debian.org/debian-lts-announce/2026/06/msg00003.html
Show 109 moreShow less
access.redhat.com/security/cve/CVE-2026-35535
bugzilla.redhat.com/show_bug.cgi?id=2454714
security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json
access.redhat.com/errata/RHSA-2026:13896
access.redhat.com/errata/RHSA-2026:13895
access.redhat.com/errata/RHSA-2026:21695
access.redhat.com/errata/RHSA-2026:21690
access.redhat.com/errata/RHSA-2026:28887
access.redhat.com/errata/RHSA-2026:23233
access.redhat.com/errata/RHSA-2026:20087
access.redhat.com/errata/RHSA-2026:34098
access.redhat.com/errata/RHSA-2026:21656
access.redhat.com/errata/RHSA-2026:20040
access.redhat.com/errata/RHSA-2026:13888
access.redhat.com/errata/RHSA-2026:10758
access.redhat.com/errata/RHSA-2026:19067
access.redhat.com/errata/RHSA-2026:13731
access.redhat.com/errata/RHSA-2026:13891
access.redhat.com/errata/RHSA-2026:14437
access.redhat.com/errata/RHSA-2026:13889
access.redhat.com/errata/RHSA-2026:12310
access.redhat.com/errata/RHSA-2026:19220
access.redhat.com/errata/RHSA-2026:11521
access.redhat.com/errata/RHSA-2026:14228
access.redhat.com/errata/RHSA-2026:13892
access.redhat.com/errata/RHSA-2026:30088
access.redhat.com/errata/RHSA-2026:21275
access.redhat.com/errata/RHSA-2026:58981
nvd.nist.gov/vuln/detail/CVE-2026-35535
github.com/advisories/GHSA-g5fc-f834-rcr2
bugzilla.redhat.com/2454714
errata.almalinux.org/10/ALSA-2026-10758.html
errata.almalinux.org/8/ALSA-2026-11521.html
errata.almalinux.org/9/ALSA-2026-12310.html
errata.almalinux.org/10/ALSA-2026-19067.html
errata.almalinux.org/9/ALSA-2026-19220.html
docs.bell-sw.com/security/cves/CVE-2026-35535
errata.tuxcare.com/els_os/centos8.4els/CLSA-2026-1777939719.html
errata.tuxcare.com/els_os/centos8.5els/CLSA-2026-1777940187.html
errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1778002733.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778005006.html
errata.tuxcare.com/els_os/tuxcare9.6esu/CLSA-2026-1778073563.html
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1780564611.html
nvd.nist.gov/vuln/detail/CVE-2021-23240
nvd.nist.gov/vuln/detail/CVE-2023-42465
errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1780564889.html
nvd.nist.gov/vuln/detail/CVE-2021-3156
errata.tuxcare.com/els_os/debian10els/CLSA-2026-1780567799.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1780574678.html
errata.tuxcare.com/els_os/ubuntu18.04els/CLSA-2026-1781342947.html
errata.tuxcare.com/els_os/ubuntu16.04els/CLSA-2026-1781343160.html
errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600964.html
errata.tuxcare.com/els_os/oraclelinux7els/CLSA-2026-1790601456.html
errata.tuxcare.com/els_os/centos7els/CLSA-2026-1790606589.html
github.com/CVEProject/cvelistV5/tree/main/cves/2026/35xxx/CVE-2026-35535.json
security-tracker.debian.org/tracker/CVE-2026-35535
advisories.mageia.org/MGASA-2026-0211.html
bugs.mageia.org/show_bug.cgi?id=35434
lists.fedoraproject.org/archives/list/[email protected]/message/R55OTRP6IUWZLJBXLPP4BYUVXGGO7R5M
cdn2.qualys.com/advisory/2026/03/10/crack-armor.txt
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1908
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1996
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1997
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1998
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2026-1999
access.redhat.com/security/updates/classification
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_10758.json
cve.org/CVERecord?id=CVE-2026-35535
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_11521.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_12310.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13731.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13888.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13889.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13891.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13892.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13895.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13896.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14228.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14437.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19067.json
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19220.json
access.redhat.com/errata/RHSA-2026:65569
images.redhat.com
access.redhat.com/security/cve/CVE-2026-82474
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_65569.json
bugzilla.redhat.com/show_bug.cgi?id=2525889
cve.org/CVERecord?id=CVE-2026-82474
nvd.nist.gov/vuln/detail/CVE-2026-82474
github.com/sudo-project/sudo
github.com/sudo-project/sudo/blob/v1.9.17p2/src/exec_ptrace.c
github.com/sudo-project/sudo/commit/71fbe42dcd5a1c8f799540583a2dfb2ae6221edf
vulncheck.com/advisories/sudo-through-1.9-17p2-intercept-policy-bypass-via-execveat
errata.rockylinux.org/RLSA-2026:10758
errata.rockylinux.org/RLSA-2026:11521
errata.rockylinux.org/RLSA-2026:12310
errata.rockylinux.org/RLSA-2026:19067
errata.rockylinux.org/RLSA-2026:19220
suse.com/support/update/announcement/2026/suse-su-20261308-1
bugzilla.suse.com/1261420
suse.com/security/cve/CVE-2026-35535
suse.com/support/update/announcement/2026/suse-su-20261309-1
suse.com/support/update/announcement/2026/suse-su-20261359-1
suse.com/support/update/announcement/2026/suse-su-202621252-1
suse.com/support/update/announcement/2026/suse-su-202621273-1
suse.com/support/update/announcement/2026/suse-su-202621369-1
ubuntu.com/security/CVE-2026-35535
ubuntu.com/security/vulnerabilities/crackarmor
ubuntu.com/blog/apparmor-vulnerability-fixes-available
ubuntu.com/security/notices/USN-8092-1
Left out on purpose, here and in the API, to keep responses small: 8 source records.