ELSA-2026-12310

ELSA-2026-12310 - sudo security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-04-30

Description

[1.9.5p2-15]
RHEL 9.7.0 ERRATUM
- CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166065

Related CVEs

CVE-2026-35535

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_aarch64_appstream
	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_aarch64_baseos_latest
	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_aarch64_u7_baseos_patch
	sudo-1.9.5p2-15.el9_7.aarch64.rpm	98e85a086b06b4f86ee0851c5d647aa8a195dded2df33a7cd645a562f53ed9d9	-	ol9_aarch64_baseos_latest
	sudo-1.9.5p2-15.el9_7.aarch64.rpm	98e85a086b06b4f86ee0851c5d647aa8a195dded2df33a7cd645a562f53ed9d9	-	ol9_aarch64_u7_baseos_patch
	sudo-python-plugin-1.9.5p2-15.el9_7.aarch64.rpm	5b9a3f99258160e722f62c50aea2ab1b43a8d079d15a67d31cadc6dafcb88442	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_x86_64_appstream
	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_x86_64_baseos_latest
	sudo-1.9.5p2-15.el9_7.src.rpm	6c4ac06c109600dfadeec7231b94bdbd3a97e1789cc8c1cf05db7a8129afdbf1	-	ol9_x86_64_u7_baseos_patch
	sudo-1.9.5p2-15.el9_7.x86_64.rpm	a6692c7e95ea0a613cc6c419bdf5b2028f8cf02126ad4ce0a227778759b72ebc	-	ol9_x86_64_baseos_latest
	sudo-1.9.5p2-15.el9_7.x86_64.rpm	a6692c7e95ea0a613cc6c419bdf5b2028f8cf02126ad4ce0a227778759b72ebc	-	ol9_x86_64_u7_baseos_patch
	sudo-python-plugin-1.9.5p2-15.el9_7.x86_64.rpm	bd74518db0748a863dd1bb792a1d84747875c8fbeedcaca03750b96e664aa72c	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team