Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

oracle-oval логотип

ELSA-2026-12310

Опубликовано: 30 апр. 2026
Источник: oracle-oval
Платформа: Oracle Linux 9

Описание

ELSA-2026-12310: sudo security update (IMPORTANT)

[1.9.5p2-15] RHEL 9.7.0 ERRATUM

  • CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls Resolves: RHEL-166065

Обновленные пакеты

Oracle Linux 9

Oracle Linux aarch64

sudo

1.9.5p2-15.el9_7

sudo-python-plugin

1.9.5p2-15.el9_7

Oracle Linux x86_64

sudo

1.9.5p2-15.el9_7

sudo-python-plugin

1.9.5p2-15.el9_7

Связанные CVE

Связанные уязвимости

CVSS3: 7.4
ubuntu
4 месяца назад

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS3: 7.4
redhat
4 месяца назад

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS3: 7.4
nvd
4 месяца назад

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS3: 7.4
msrc
4 месяца назад

Описание отсутствует

CVSS3: 7.4
debian
4 месяца назад

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid ...