https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T21:09:36.563873+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2023-28486 CVE-2023-28486 2026-09-28T21:09:40.073083+00:00

Sudo before 1.9.13 does not escape control characters in log messages.

 https://vulnerability.circl.lu/vuln/usn-6005-1 USN-6005-1 — sudo vulnerabilities 2026-09-28T21:09:40.073179+00:00

Affected: Ubuntu:18.04:LTS: sudo, Ubuntu:20.04:LTS: sudo, Ubuntu:22.04:LTS: sudo

Matthieu Barjole and Victor Cutillas discovered that Sudo incorrectly escaped control characters in log messages and sudoreplay output. An attacker could possibly use these issues to inject terminal control characters that alter output when being viewed.