Описание
Security update for sudo
This update for sudo fixes the following issue:
- CVE-2026-35535: Fixed potential privilege escalation when running the mailer (bsc#1261420).
Список пакетов
Container bci/spack:latest
sudo-1.9.15p5-150600.3.15.1
Container suse/manager/5.0/x86_64/server:latest
sudo-1.9.15p5-150600.3.15.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest
sudo-1.9.15p5-150600.3.15.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Azure-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Azure-Basic
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Azure-Standard
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-Aliyun
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-GDC
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-CHOST-BYOS-SAP-CCloud
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-EC2-ECS-HVM
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-HPC-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Hardened-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Azure-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-BYOS
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAP-Hardened-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAPCAL
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAPCAL-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAPCAL-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP6-SAPCAL-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Azure-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Azure-Basic
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Azure-Standard
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-Aliyun
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-GDC
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-CHOST-BYOS-SAP-CCloud
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-EC2-ECS-HVM
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-GCE-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-HPC-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-HPC-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-HPC-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-HPC-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Azure-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-GCE-3P
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Hardened-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Hardened-BYOS-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Hardened-BYOS-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Hardened-BYOS-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAP-Hardened-GCE
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAPCAL-Azure
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAPCAL-EC2
sudo-1.9.15p5-150600.3.15.1
Image SLES15-SP7-SAPCAL-GCE
sudo-1.9.15p5-150600.3.15.1
Image proxy-salt-broker-image
sudo-1.9.15p5-150600.3.15.1
Image server-image-sles15sp7
sudo-1.9.15p5-150600.3.15.1
SUSE Linux Enterprise Module for Basesystem 15 SP7
sudo-1.9.15p5-150600.3.15.1
sudo-devel-1.9.15p5-150600.3.15.1
sudo-plugin-python-1.9.15p5-150600.3.15.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.15.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.15.1
system-group-sudo-1.9.15p5-150600.3.15.1
SUSE Linux Enterprise Server 15 SP6-LTSS
sudo-1.9.15p5-150600.3.15.1
sudo-devel-1.9.15p5-150600.3.15.1
sudo-plugin-python-1.9.15p5-150600.3.15.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.15.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.15.1
system-group-sudo-1.9.15p5-150600.3.15.1
SUSE Linux Enterprise Server for SAP Applications 15 SP6
sudo-1.9.15p5-150600.3.15.1
sudo-devel-1.9.15p5-150600.3.15.1
sudo-plugin-python-1.9.15p5-150600.3.15.1
sudo-policy-sudo-auth-self-1.9.15p5-150600.3.15.1
sudo-policy-wheel-auth-self-1.9.15p5-150600.3.15.1
system-group-sudo-1.9.15p5-150600.3.15.1
Ссылки
- Link for SUSE-SU-2026:1359-1
- E-Mail link for SUSE-SU-2026:1359-1
- SUSE Security Ratings
- SUSE Bug 1261420
- SUSE CVE CVE-2026-35535 page
Описание
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Затронутые продукты
Container bci/spack:latest:sudo-1.9.15p5-150600.3.15.1
Container suse/manager/5.0/x86_64/server:latest:sudo-1.9.15p5-150600.3.15.1
Container suse/multi-linux-manager/5.1/x86_64/proxy-salt-broker:latest:sudo-1.9.15p5-150600.3.15.1
Container suse/multi-linux-manager/5.1/x86_64/server:latest:sudo-1.9.15p5-150600.3.15.1
Ссылки
- CVE-2026-35535
- SUSE Bug 1261420
- SUSE Bug 1265943