ELSA-2026-19220

ELSA-2026-19220 - sudo security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-06-12

Description

[1.9.17p2-3]
- CVE-2026-35535 sudo: Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166069

[1.9.17p2-2]
- Request to backport support for regex in sudo [rhel-9]
Resolves: RHEL-1376
- Rebase of sudo to 1.9.17p2 [rhel-9]
Resolves: RHEL-128623
- sudo passes SHELL environment variable twice to the shell being executed [rhel-9]
Resolves: RHEL-127359

Related CVEs

CVE-2026-35535

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_aarch64_appstream
	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_aarch64_baseos_latest
	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_aarch64_u8_baseos_base
	sudo-1.9.17p2-3.el9_8.aarch64.rpm	41d3c24efba500c6fc3ddcf25c67d5343e1f84ec84b47c77e3cd09ee6858fe8a	-	ol9_aarch64_baseos_latest
	sudo-1.9.17p2-3.el9_8.aarch64.rpm	41d3c24efba500c6fc3ddcf25c67d5343e1f84ec84b47c77e3cd09ee6858fe8a	-	ol9_aarch64_u8_baseos_base
	sudo-python-plugin-1.9.17p2-3.el9_8.aarch64.rpm	4f569cf51170e4631be01994865b2487b944c68a4258486beada4cef95b3ccc2	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_x86_64_appstream
	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_x86_64_baseos_latest
	sudo-1.9.17p2-3.el9_8.src.rpm	04b8efcf72eaa30ba76d98c8f300897c6b6356287cb4e85f61b97d00e84fbf3f	-	ol9_x86_64_u8_baseos_base
	sudo-1.9.17p2-3.el9_8.x86_64.rpm	613fbe129c2b4060415deb8a8690e557c49ce4e4ecf83cff03dc6bf962ef7b4f	-	ol9_x86_64_baseos_latest
	sudo-1.9.17p2-3.el9_8.x86_64.rpm	613fbe129c2b4060415deb8a8690e557c49ce4e4ecf83cff03dc6bf962ef7b4f	-	ol9_x86_64_u8_baseos_base
	sudo-python-plugin-1.9.17p2-3.el9_8.x86_64.rpm	d58fbf00f8aa72354ec415d76928bf0e4df512c9b72fcadecd2fd895dfd6cc80	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team