ELSA-2026-75571

ELSA-2026-75571 - sudo security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[1.9.17p2-3.3]
- CVE-2026-96512 sudo: TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization [rhel-9.8.z]
Resolves: RHEL-267328

Related CVEs

CVE-2026-96512

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_aarch64_appstream
	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_aarch64_baseos_latest
	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_aarch64_u8_baseos_patch
	sudo-1.9.17p2-3.el9_8.3.aarch64.rpm	20cd455872e9ee74679d11556351cf1ed220cccabff229c72733e44bf90c8529	-	ol9_aarch64_baseos_latest
	sudo-1.9.17p2-3.el9_8.3.aarch64.rpm	20cd455872e9ee74679d11556351cf1ed220cccabff229c72733e44bf90c8529	-	ol9_aarch64_u8_baseos_patch
	sudo-python-plugin-1.9.17p2-3.el9_8.3.aarch64.rpm	2d0f22f46f65ace1e95850a957466dfc822abe454259bc1e4ae3de4eb6464524	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_x86_64_appstream
	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_x86_64_baseos_latest
	sudo-1.9.17p2-3.el9_8.3.src.rpm	86de2418109e449d96b45909718bd5e46dc7cd9d99de7c29e6f5482ab5108a20	-	ol9_x86_64_u8_baseos_patch
	sudo-1.9.17p2-3.el9_8.3.x86_64.rpm	e496593abb29da03db1f0be3e3a067a27aab7e155e620ca9a745804facead5eb	-	ol9_x86_64_baseos_latest
	sudo-1.9.17p2-3.el9_8.3.x86_64.rpm	e496593abb29da03db1f0be3e3a067a27aab7e155e620ca9a745804facead5eb	-	ol9_x86_64_u8_baseos_patch
	sudo-python-plugin-1.9.17p2-3.el9_8.3.x86_64.rpm	ced233a47a6c3dcb615259f871fb4bbd5c36fd2b96101df3e6d3dc074b25e8d2	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team