ELSA-2026-75580

ELSA-2026-75580 - sudo security update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2026-10-05

Description

[1.9.5p2-2.0.1]
- Fixes sudo -s unclosed sessions when use_pty option used [Orabug: 36952911]

[1.9.5p2-2]
RHEL 8.10.0.Z ERRATUM
- CVE-2026-96512 - TZ environment variable allows bypass of NOTBEFORE/NOTAFTER time-based authorization [rhel-8.10.z]
Resolves: RHEL-267341

[1.9.5p2-1.5]
RHEL 8.10.0.Z ERRATUM
- CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166060

[1.9.5p2-1.3]
RHEL 8.10.0.Z ERRATUM
- sudo passes SHELL environment variable twice to the shell being executed [rhel-8]
Resolves: RHEL-127360

[1.9.5p2-1.2]
RHEL 8.10.0.Z ERRATUM
- Reintroduce cmnd_no_wait
Resolves: RHEL-51956
- Missing separator in the log
Resolves: RHEL-71913

[1.9.5p2-1.1]
RHEL 8.10.0.Z ERRATUM
- CVE-2025-32462 sudo: LPE via host option
Resolves: RHEL-100014

Related CVEs

CVE-2026-96512

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	sudo-1.9.5p2-2.0.1.el8_10.src.rpm	08edf8f87980348a618ad7813820962b2d5bb04753dd432133eaf5e914e86afe	-	ol8_aarch64_baseos_latest
	sudo-1.9.5p2-2.0.1.el8_10.src.rpm	08edf8f87980348a618ad7813820962b2d5bb04753dd432133eaf5e914e86afe	-	ol8_aarch64_u10_baseos_patch
	sudo-1.9.5p2-2.0.1.el8_10.aarch64.rpm	5200c502b49f12b45db0640da3225fd626bf8e568949c7627c15efe1cc140e0c	-	ol8_aarch64_baseos_latest
	sudo-1.9.5p2-2.0.1.el8_10.aarch64.rpm	5200c502b49f12b45db0640da3225fd626bf8e568949c7627c15efe1cc140e0c	-	ol8_aarch64_u10_baseos_patch
Oracle Linux 8 (x86_64)	sudo-1.9.5p2-2.0.1.el8_10.src.rpm	08edf8f87980348a618ad7813820962b2d5bb04753dd432133eaf5e914e86afe	-	ol8_x86_64_baseos_latest
	sudo-1.9.5p2-2.0.1.el8_10.src.rpm	08edf8f87980348a618ad7813820962b2d5bb04753dd432133eaf5e914e86afe	-	ol8_x86_64_u10_baseos_patch
	sudo-1.9.5p2-2.0.1.el8_10.x86_64.rpm	4b9dd29346e2668c86fea0602e406a3687e8d76f255f0481384bcb78b08522d8	-	ol8_x86_64_baseos_latest
	sudo-1.9.5p2-2.0.1.el8_10.x86_64.rpm	4b9dd29346e2668c86fea0602e406a3687e8d76f255f0481384bcb78b08522d8	-	ol8_x86_64_u10_baseos_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team