Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-35535 (GCVE-0-2026-35535)
Vulnerability from cvelistv5 – Published: 2026-04-03 02:21 – Updated: 2026-07-10 12:05
VLAI
EPSS
VEX
Summary
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.
Severity
7.4 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
Assigner
References
33 references
Impacted products
36 products
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-35535",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-04-03T00:00:00+00:00",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-04-04T03:55:19.379Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"defaultStatus": "unknown",
"product": "RUGGEDCOM RST2428P",
"vendor": "Siemens",
"versions": [
{
"lessThan": "V4.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T13:01:15.329Z",
"orgId": "0b142b55-0307-4c5a-b3c9-f314f3fb7c5e",
"shortName": "siemens-SADP"
},
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/html/ssa-253495.html"
}
],
"x_adpType": "supplier"
},
{
"providerMetadata": {
"dateUpdated": "2026-06-04T15:01:58.149Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"url": "https://lists.debian.org/debian-lts-announce/2026/06/msg00003.html"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:6"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.12::el8"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.12",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.13::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.13",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.14::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.14",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.15::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.15",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.16::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.16",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:openshift:4.19::el9"
],
"defaultStatus": "affected",
"product": "Red Hat OpenShift Container Platform 4.19",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.0::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.4::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:enterprise_linux:9::appstream"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux AppStream (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v. 10.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.1",
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 10)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_aus:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_tus:8.8::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.0::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.0)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_e4s:9.2::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus:9.4::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:rhel_eus:9.6::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS EUS (v.9.6)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/o:redhat:enterprise_linux:9::baseos"
],
"defaultStatus": "affected",
"product": "Red Hat Enterprise Linux BaseOS (v. 9)",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:ai_inference_server:3.3::el9"
],
"defaultStatus": "affected",
"product": "Red Hat AI Inference Server 3.3",
"vendor": "Red Hat"
},
{
"cpes": [
"cpe:/a:redhat:rhui:5::el9"
],
"defaultStatus": "affected",
"product": "Red Hat Update Infrastructure 5",
"vendor": "Red Hat"
}
],
"datePublic": "2026-04-03T02:21:33.584Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-272",
"description": "Least Privilege Violation",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-07-10T12:05:55.522Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"name": "RHBZ#2454714",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13896"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13895"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21695"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21690"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:28887"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23233"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34098"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21656"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13888"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:10758"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19067"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13731"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13891"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14437"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13889"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:12310"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:19220"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:11521"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:14228"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:13892"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:30088"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:21275"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:13896: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)"
},
{
"lang": "en",
"value": "RHSA-2026:13895: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12"
},
{
"lang": "en",
"value": "RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13"
},
{
"lang": "en",
"value": "RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14"
},
{
"lang": "en",
"value": "RHSA-2026:23233: Red Hat OpenShift Container Platform 4.15"
},
{
"lang": "en",
"value": "RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16"
},
{
"lang": "en",
"value": "RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:20040: Red Hat OpenShift Container Platform 4.19"
},
{
"lang": "en",
"value": "RHSA-2026:13888: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:10758: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:19067: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:13731: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)"
},
{
"lang": "en",
"value": "RHSA-2026:13891: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:14437: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:13889: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:12310: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:19220: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:11521: Red Hat Enterprise Linux BaseOS (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:14228: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)"
},
{
"lang": "en",
"value": "RHSA-2026:13892: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)"
},
{
"lang": "en",
"value": "RHSA-2026:30088: Red Hat AI Inference Server 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:21275: Red Hat Update Infrastructure 5"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-04-03T03:01:03.124Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-04-03T02:21:33.584Z",
"value": "Made public."
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "Sudo",
"vendor": "Sudo project",
"versions": [
{
"lessThan": "3e474c2f201484be83d994ae10a4e20e8c81bb69",
"status": "affected",
"version": "0",
"versionType": "git"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-271",
"description": "CWE-271 Privilege Dropping / Lowering Errors",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-04-03T02:21:33.584Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
},
{
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"url": "https://bugs.debian.org/1130593"
}
],
"x_generator": {
"engine": "CVE-Request-form 0.0.1"
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2026-35535",
"datePublished": "2026-04-03T02:21:33.584Z",
"dateReserved": "2026-04-03T02:21:32.829Z",
"dateUpdated": "2026-07-10T12:05:55.522Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-35535",
"date": "2026-07-11",
"epss": "0.00173",
"percentile": "0.07005"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-35535\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2026-04-03T03:16:18.233\",\"lastModified\":\"2026-07-10T12:16:43.683\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.\"}],\"affected\":[{\"source\":\"cve@mitre.org\",\"affectedData\":[{\"vendor\":\"Sudo project\",\"product\":\"Sudo\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"3e474c2f201484be83d994ae10a4e20e8c81bb69\",\"versionType\":\"git\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.12\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.12::el8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.13\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.13::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.14\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.14::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.15\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.15::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.16\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.16::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.19\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:openshift:4.19::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.4::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AppStream (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9::appstream\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 10)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.1\",\"cpe:/o:redhat:enterprise_linux:10.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_aus:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS TUS (v.8.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_tus:8.8::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.0)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v.9.4)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.4::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:rhel_eus:9.6::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux BaseOS (v. 9)\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9::baseos\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat AI Inference Server 3.3\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:ai_inference_server:3.3::el9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Update Infrastructure 5\",\"defaultStatus\":\"affected\",\"cpes\":[\"cpe:/a:redhat:rhui:5::el9\"]}]},{\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"affectedData\":[{\"vendor\":\"Siemens\",\"product\":\"RUGGEDCOM RST2428P\",\"defaultStatus\":\"unknown\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"V4.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"cve@mitre.org\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.4,\"impactScore\":5.9},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":5.9},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":7.4,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.4,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-04-03T00:00:00+00:00\",\"id\":\"CVE-2026-35535\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"cve@mitre.org\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-271\"}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-272\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sudo_project:sudo:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"1.9.17\",\"matchCriteriaId\":\"F87EA85C-7218-4B4A-BEDD-3E659E0F1844\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sudo_project:sudo:1.9.17:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"B563C690-EE9A-437C-9410-54209F82F827\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sudo_project:sudo:1.9.17:p1:*:*:*:*:*:*\",\"matchCriteriaId\":\"85195641-E25B-4CC6-8AB1-A04B9FAC151D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:sudo_project:sudo:1.9.17:p2:*:*:*:*:*:*\",\"matchCriteriaId\":\"F6C77AD7-701D-4FE9-A473-259C05EA0C96\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:siemens:sinec_os:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"4.0\",\"matchCriteriaId\":\"C82988C9-17E0-46E9-9C58-23CD403ECC29\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:siemens:ruggedcom_rst2428p:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5162CF70-42A4-4CBD-BE7E-17526719138A\"}]}]}],\"references\":[{\"url\":\"https://bugs.debian.org/1130593\",\"source\":\"cve@mitre.org\",\"tags\":[\"Broken Link\"]},{\"url\":\"https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042\",\"source\":\"cve@mitre.org\",\"tags\":[\"Issue Tracking\"]},{\"url\":\"https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://www.qualys.com/2026/03/10/crack-armor.txt\",\"source\":\"cve@mitre.org\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://lists.debian.org/debian-lts-announce/2026/06/msg00003.html\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:10758\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:11521\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:12310\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13731\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13888\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13889\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13891\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13892\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13895\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:13896\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14228\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:14437\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19067\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:19220\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20040\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:20087\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21275\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21656\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21690\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:21695\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23233\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:28887\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:30088\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34098\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-35535\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2454714\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://cert-portal.siemens.com/productcert/html/ssa-253495.html\",\"source\":\"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\",\"tags\":[\"Third Party Advisory\"]},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-07-09T17:38:33+00:00",
"cve": "CVE-2026-35535",
"id": "CVE-2026-35535",
"initial_release_date": "2026-04-03T02:21:33.584000+00:00",
"product_status:fixed": "409",
"product_status:known_not_affected": "2",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"affected\": [{\"vendor\": \"Siemens\", \"product\": \"RUGGEDCOM RST2428P\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"V4.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unknown\"}], \"x_adpType\": \"supplier\", \"references\": [{\"url\": \"https://cert-portal.siemens.com/productcert/html/ssa-253495.html\"}], \"providerMetadata\": {\"orgId\": \"0b142b55-0307-4c5a-b3c9-f314f3fb7c5e\", \"shortName\": \"siemens-SADP\", \"dateUpdated\": \"2026-06-02T13:01:15.329Z\"}}, {\"title\": \"CVE Program Container\", \"references\": [{\"url\": \"https://lists.debian.org/debian-lts-announce/2026/06/msg00003.html\"}], \"providerMetadata\": {\"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\", \"dateUpdated\": \"2026-06-04T15:01:58.149Z\"}}, {\"title\": \"sudo: Sudo: Privilege escalation due to failure in privilege drop calls\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.4, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux Server Optional (v. 7 ELS)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.12::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.12\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.13\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.14\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.15\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.16\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.19\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.0::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.4::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9::appstream\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AppStream (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.1\", \"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 10)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_aus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS AUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_tus:8.8::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS TUS (v.8.8)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.0::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.0)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_e4s:9.2::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS E4S (v.9.2)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.4::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.4)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_eus:9.6::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS EUS (v.9.6)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9::baseos\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux BaseOS (v. 9)\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ai_inference_server:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat AI Inference Server 3.3\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhui:5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Update Infrastructure 5\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-04-03T03:01:03.124Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-04-03T02:21:33.584Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:13896: Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION), Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13895: Red Hat Enterprise Linux Server (v. 7 ELS), Red Hat Enterprise Linux Server Optional (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21695: Red Hat OpenShift Container Platform 4.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21690: Red Hat OpenShift Container Platform 4.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:28887: Red Hat OpenShift Container Platform 4.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23233: Red Hat OpenShift Container Platform 4.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20087: Red Hat OpenShift Container Platform 4.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34098: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21656: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:20040: Red Hat OpenShift Container Platform 4.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13888: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux BaseOS EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:10758: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19067: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux BaseOS (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13731: Red Hat Enterprise Linux AppStream E4S (v.9.0), Red Hat Enterprise Linux BaseOS E4S (v.9.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13891: Red Hat Enterprise Linux AppStream E4S (v.9.2), Red Hat Enterprise Linux BaseOS E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14437: Red Hat Enterprise Linux AppStream EUS (v.9.4), Red Hat Enterprise Linux BaseOS EUS (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13889: Red Hat Enterprise Linux AppStream EUS (v.9.6), Red Hat Enterprise Linux BaseOS EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:12310: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:19220: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux BaseOS (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:11521: Red Hat Enterprise Linux BaseOS (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:14228: Red Hat Enterprise Linux BaseOS AUS (v.8.6), Red Hat Enterprise Linux BaseOS E4S (v.8.6), Red Hat Enterprise Linux BaseOS TUS (v.8.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:13892: Red Hat Enterprise Linux BaseOS E4S (v.8.8), Red Hat Enterprise Linux BaseOS TUS (v.8.8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:30088: Red Hat AI Inference Server 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:21275: Red Hat Update Infrastructure 5\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-04-03T02:21:33.584Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-35535\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2454714\", \"name\": \"RHBZ#2454714\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-35535.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13896\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13895\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21695\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21690\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:28887\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23233\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20087\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34098\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21656\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:20040\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13888\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:10758\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19067\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13731\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13891\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14437\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13889\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:12310\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:19220\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:11521\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:14228\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:13892\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:30088\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:21275\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-272\", \"description\": \"Least Privilege Violation\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-07-10T12:05:55.522Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-35535\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-04-03T13:14:52.302723Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-04-03T13:14:56.484Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.4, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Sudo project\", \"product\": \"Sudo\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"3e474c2f201484be83d994ae10a4e20e8c81bb69\", \"versionType\": \"git\"}], \"defaultStatus\": \"unaffected\"}], \"references\": [{\"url\": \"https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69\"}, {\"url\": \"https://www.qualys.com/2026/03/10/crack-armor.txt\"}, {\"url\": \"https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042\"}, {\"url\": \"https://bugs.debian.org/1130593\"}], \"x_generator\": {\"engine\": \"CVE-Request-form 0.0.1\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-271\", \"description\": \"CWE-271 Privilege Dropping / Lowering Errors\"}]}], \"providerMetadata\": {\"orgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"shortName\": \"mitre\", \"dateUpdated\": \"2026-04-03T02:21:33.584Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-35535\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-07-10T12:05:55.522Z\", \"dateReserved\": \"2026-04-03T02:21:32.829Z\", \"assignerOrgId\": \"8254265b-2729-46b6-b9e3-3dfca2d5bfca\", \"datePublished\": \"2026-04-03T02:21:33.584Z\", \"assignerShortName\": \"mitre\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:13891
Vulnerability from csaf_redhat - Published: 2026-05-06 00:46 - Updated: 2026-07-09 17:51Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13891",
"url": "https://access.redhat.com/errata/RHSA-2026:13891"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13891.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:51:57+00:00",
"generator": {
"date": "2026-07-09T17:51:57+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:13891",
"initial_release_date": "2026-05-06T00:46:41+00:00",
"revision_history": [
{
"date": "2026-05-06T00:46:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T00:46:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:51:57+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:9.2::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-9.el9_2.4.src",
"product": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.src",
"product_id": "sudo-0:1.9.5p2-9.el9_2.4.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-9.el9_2.4?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"product": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_id": "sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-9.el9_2.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"product_id": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-9.el9_2.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_id": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-9.el9_2.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-9.el9_2.4?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"product_id": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-9.el9_2.4?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_id": "sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-9.el9_2.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_id": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-9.el9_2.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-9.el9_2.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-9.el9_2.4?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_id": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-9.el9_2.4?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"product": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_id": "sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-9.el9_2.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"product_id": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-9.el9_2.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_id": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-9.el9_2.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-9.el9_2.4?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"product_id": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-9.el9_2.4?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-9.el9_2.4.s390x",
"product": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.s390x",
"product_id": "sudo-0:1.9.5p2-9.el9_2.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-9.el9_2.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"product_id": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-9.el9_2.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product_id": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-9.el9_2.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-9.el9_2.4?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"product_id": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-9.el9_2.4?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.src"
},
"product_reference": "sudo-0:1.9.5p2-9.el9_2.4.src",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.9.2)",
"product_id": "BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"relates_to_product_reference": "BaseOS-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.src",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T00:46:41+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.src",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13891"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-0:1.9.5p2-9.el9_2.4.x86_64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"AppStream-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.src",
"BaseOS-9.2.0.Z.E4S:sudo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-debugsource-0:1.9.5p2-9.el9_2.4.x86_64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.aarch64",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.ppc64le",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.s390x",
"BaseOS-9.2.0.Z.E4S:sudo-python-plugin-debuginfo-0:1.9.5p2-9.el9_2.4.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:13892
Vulnerability from csaf_redhat - Published: 2026-05-06 00:40 - Updated: 2026-07-09 17:51Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.8.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions and Red Hat Enterprise Linux 8.8 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13892",
"url": "https://access.redhat.com/errata/RHSA-2026:13892"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13892.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:51:53+00:00",
"generator": {
"date": "2026-07-09T17:51:53+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:13892",
"initial_release_date": "2026-05-06T00:40:29+00:00",
"revision_history": [
{
"date": "2026-05-06T00:40:29+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T00:40:29+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:51:53+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.8::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.8::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_8.3.src",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.src",
"product_id": "sudo-0:1.9.5p2-1.el8_8.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_8.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_id": "sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_8.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_8.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_8.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"product_id": "sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_8.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_8.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_8.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.ppc64le"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.src"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_8.3.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.src"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_8.3.src",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.8)",
"product_id": "BaseOS-8.8.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"relates_to_product_reference": "BaseOS-8.8.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T00:40:29+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13892"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.E4S:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.ppc64le",
"BaseOS-8.8.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.src",
"BaseOS-8.8.0.Z.TUS:sudo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_8.3.x86_64",
"BaseOS-8.8.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_8.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:13895
Vulnerability from csaf_redhat - Published: 2026-05-06 01:00 - Updated: 2026-07-09 17:49Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
23 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-0:1.8.23-10.el7_9.5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-0:1.8.23-10.el7_9.5.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-0:1.8.23-10.el7_9.5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 7 Extended Lifecycle Support.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13895",
"url": "https://access.redhat.com/errata/RHSA-2026:13895"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13895.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:49:20+00:00",
"generator": {
"date": "2026-07-09T17:49:20+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:13895",
"initial_release_date": "2026-05-06T01:00:22+00:00",
"revision_history": [
{
"date": "2026-05-06T01:00:22+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T01:00:22+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:49:20+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:7"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.23-10.el7_9.5.src",
"product": {
"name": "sudo-0:1.8.23-10.el7_9.5.src",
"product_id": "sudo-0:1.8.23-10.el7_9.5.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.23-10.el7_9.5?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.23-10.el7_9.5.x86_64",
"product": {
"name": "sudo-0:1.8.23-10.el7_9.5.x86_64",
"product_id": "sudo-0:1.8.23-10.el7_9.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.23-10.el7_9.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.x86_64",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.x86_64",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64le",
"product": {
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64le",
"product_id": "sudo-0:1.8.23-10.el7_9.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.23-10.el7_9.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64",
"product": {
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64",
"product_id": "sudo-0:1.8.23-10.el7_9.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.23-10.el7_9.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=ppc64"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=ppc64"
}
}
}
],
"category": "architecture",
"name": "ppc64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.23-10.el7_9.5.s390x",
"product": {
"name": "sudo-0:1.8.23-10.el7_9.5.s390x",
"product_id": "sudo-0:1.8.23-10.el7_9.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.23-10.el7_9.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=ppc"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=ppc"
}
}
}
],
"category": "architecture",
"name": "ppc"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=s390"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-devel-0:1.8.23-10.el7_9.5.i686",
"product": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.i686",
"product_id": "sudo-devel-0:1.8.23-10.el7_9.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.23-10.el7_9.5?arch=i686"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"product": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"product_id": "sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.23-10.el7_9.5?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64"
},
"product_reference": "sudo-0:1.8.23-10.el7_9.5.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.23-10.el7_9.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64le"
},
"product_reference": "sudo-0:1.8.23-10.el7_9.5.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.23-10.el7_9.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-0:1.8.23-10.el7_9.5.s390x"
},
"product_reference": "sudo-0:1.8.23-10.el7_9.5.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.23-10.el7_9.5.src as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-0:1.8.23-10.el7_9.5.src"
},
"product_reference": "sudo-0:1.8.23-10.el7_9.5.src",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.23-10.el7_9.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-0:1.8.23-10.el7_9.5.x86_64"
},
"product_reference": "sudo-0:1.8.23-10.el7_9.5.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64 as a component of Red Hat Enterprise Linux Server (v. 7 ELS)",
"product_id": "7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"relates_to_product_reference": "7Server-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.i686"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.i686 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.i686"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.i686",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64le as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64le"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.s390",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.s390x as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390x"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"relates_to_product_reference": "7Server-optional-ELS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.23-10.el7_9.5.x86_64 as a component of Red Hat Enterprise Linux Server Optional (v. 7 ELS)",
"product_id": "7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.x86_64"
},
"product_reference": "sudo-devel-0:1.8.23-10.el7_9.5.x86_64",
"relates_to_product_reference": "7Server-optional-ELS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.src",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T01:00:22+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.src",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13895"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.src",
"7Server-ELS:sudo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-debuginfo-0:1.8.23-10.el7_9.5.x86_64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.i686",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.ppc64le",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.s390x",
"7Server-optional-ELS:sudo-devel-0:1.8.23-10.el7_9.5.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:13896
Vulnerability from csaf_redhat - Published: 2026-05-06 00:43 - Updated: 2026-07-09 17:49Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
15 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.i686 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: 6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:13896",
"url": "https://access.redhat.com/errata/RHSA-2026:13896"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_13896.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:49:19+00:00",
"generator": {
"date": "2026-07-09T17:49:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:13896",
"initial_release_date": "2026-05-06T00:43:34+00:00",
"revision_history": [
{
"date": "2026-05-06T00:43:34+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T00:43:34+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:49:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product": {
"name": "Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:6"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product": {
"name": "Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_els:6"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.6p3-29.el6_10.8.src",
"product": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.src",
"product_id": "sudo-0:1.8.6p3-29.el6_10.8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.6p3-29.el6_10.8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"product": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"product_id": "sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.6p3-29.el6_10.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"product_id": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.6p3-29.el6_10.8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64",
"product": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64",
"product_id": "sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.6p3-29.el6_10.8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.6p3-29.el6_10.8.s390x",
"product": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.s390x",
"product_id": "sudo-0:1.8.6p3-29.el6_10.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.6p3-29.el6_10.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"product": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"product_id": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.6p3-29.el6_10.8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"product": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"product_id": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.6p3-29.el6_10.8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.8.6p3-29.el6_10.8.i686",
"product": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.i686",
"product_id": "sudo-0:1.8.6p3-29.el6_10.8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.8.6p3-29.el6_10.8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"product": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"product_id": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.6p3-29.el6_10.8?arch=i686"
}
}
},
{
"category": "product_version",
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"product": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"product_id": "sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.6p3-29.el6_10.8?arch=i686"
}
}
}
],
"category": "architecture",
"name": "i686"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"product": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"product_id": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-devel@1.8.6p3-29.el6_10.8?arch=s390"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"product": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"product_id": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.8.6p3-29.el6_10.8?arch=s390"
}
}
}
],
"category": "architecture",
"name": "s390"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.i686"
},
"product_reference": "sudo-0:1.8.6p3-29.el6_10.8.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.s390x"
},
"product_reference": "sudo-0:1.8.6p3-29.el6_10.8.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.src as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.src"
},
"product_reference": "sudo-0:1.8.6p3-29.el6_10.8.src",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.8.6p3-29.el6_10.8.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.x86_64"
},
"product_reference": "sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64 as a component of Red Hat Enterprise Linux Server -EXTENSION(v. 6 ELS-EXTENSION)",
"product_id": "6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"relates_to_product_reference": "6Server-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.i686 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.i686"
},
"product_reference": "sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390"
},
"product_reference": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390x as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390x"
},
"product_reference": "sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64 as a component of Red Hat Enterprise Linux Server Optional -EXTENSION (v. 6 ELS -EXTENSION)",
"product_id": "6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64"
},
"product_reference": "sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64",
"relates_to_product_reference": "6Server-optional-ELS.EXTENSION"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.src",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T00:43:34+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.src",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:13896"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.src",
"6Server-ELS.EXTENSION:sudo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-debuginfo-0:1.8.6p3-29.el6_10.8.x86_64",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.i686",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.s390x",
"6Server-optional-ELS.EXTENSION:sudo-devel-0:1.8.6p3-29.el6_10.8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:14228
Vulnerability from csaf_redhat - Published: 2026-05-06 17:20 - Updated: 2026-07-09 17:51Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.AUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-8.6.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support, Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions, and Red Hat Enterprise Linux 8.6 Telecommunications Update Service.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:14228",
"url": "https://access.redhat.com/errata/RHSA-2026:14228"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14228.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:51:46+00:00",
"generator": {
"date": "2026-07-09T17:51:46+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:14228",
"initial_release_date": "2026-05-06T17:20:12+00:00",
"revision_history": [
{
"date": "2026-05-06T17:20:12+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T17:20:12+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:51:46+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_aus:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_e4s:8.6::baseos"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_tus:8.6::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_6.3.src",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.src",
"product_id": "sudo-0:1.9.5p2-1.el8_6.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_6.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"product_id": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_6.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_6.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_6.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_6.3.s390x",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.s390x",
"product_id": "sudo-0:1.9.5p2-1.el8_6.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_6.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_6.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_6.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"product_id": "sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_6.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_6.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_6.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_id": "sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-1.el8_6.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_id": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-1.el8_6.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-1.el8_6.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.src as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.src"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS AUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.AUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.AUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.aarch64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.ppc64le"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.s390x"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.src as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.src"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS E4S (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.src as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.src"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.src",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS TUS (v.8.6)",
"product_id": "BaseOS-8.6.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"relates_to_product_reference": "BaseOS-8.6.0.Z.TUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T17:20:12+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14228"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.AUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.AUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.E4S:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.aarch64",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.ppc64le",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.s390x",
"BaseOS-8.6.0.Z.E4S:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.src",
"BaseOS-8.6.0.Z.TUS:sudo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debuginfo-0:1.9.5p2-1.el8_6.3.x86_64",
"BaseOS-8.6.0.Z.TUS:sudo-debugsource-0:1.9.5p2-1.el8_6.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:14437
Vulnerability from csaf_redhat - Published: 2026-05-06 22:25 - Updated: 2026-07-09 17:53Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:14437",
"url": "https://access.redhat.com/errata/RHSA-2026:14437"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_14437.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:53:39+00:00",
"generator": {
"date": "2026-07-09T17:53:39+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:14437",
"initial_release_date": "2026-05-06T22:25:43+00:00",
"revision_history": [
{
"date": "2026-05-06T22:25:43+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-06T22:25:43+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:53:39+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_eus:9.4::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:rhel_eus:9.4::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"product_id": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-10.el9_4.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"product_id": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-10.el9_4.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_id": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-10.el9_4.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-10.el9_4.3?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"product": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_id": "sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-10.el9_4.3?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_id": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-10.el9_4.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_id": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-10.el9_4.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-10.el9_4.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-10.el9_4.3?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_id": "sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-10.el9_4.3?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"product_id": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-10.el9_4.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"product_id": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-10.el9_4.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_id": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-10.el9_4.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-10.el9_4.3?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"product": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_id": "sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-10.el9_4.3?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"product": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"product_id": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.5p2-10.el9_4.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"product": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"product_id": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.5p2-10.el9_4.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product_id": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.5p2-10.el9_4.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.5p2-10.el9_4.3?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-10.el9_4.3.s390x",
"product": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.s390x",
"product_id": "sudo-0:1.9.5p2-10.el9_4.3.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-10.el9_4.3?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.5p2-10.el9_4.3.src",
"product": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.src",
"product_id": "sudo-0:1.9.5p2-10.el9_4.3.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.5p2-10.el9_4.3?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux AppStream EUS (v.9.4)",
"product_id": "AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "AppStream-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.src as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.src"
},
"product_reference": "sudo-0:1.9.5p2-10.el9_4.3.src",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64 as a component of Red Hat Enterprise Linux BaseOS EUS (v.9.4)",
"product_id": "BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"relates_to_product_reference": "BaseOS-9.4.0.Z.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.src",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-06T22:25:43+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.src",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:14437"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-0:1.9.5p2-10.el9_4.3.x86_64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"AppStream-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.src",
"BaseOS-9.4.0.Z.EUS:sudo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-debugsource-0:1.9.5p2-10.el9_4.3.x86_64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.aarch64",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.ppc64le",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.s390x",
"BaseOS-9.4.0.Z.EUS:sudo-python-plugin-debuginfo-0:1.9.5p2-10.el9_4.3.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:19067
Vulnerability from csaf_redhat - Published: 2026-05-19 13:41 - Updated: 2026-07-09 17:47Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 10.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 10.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19067",
"url": "https://access.redhat.com/errata/RHSA-2026:19067"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19067.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:47:19+00:00",
"generator": {
"date": "2026-07-09T17:47:19+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:19067",
"initial_release_date": "2026-05-19T13:41:20+00:00",
"revision_history": [
{
"date": "2026-05-19T13:41:20+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T13:41:20+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:47:19+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:10.2"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"product": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"product_id": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17-4.p2.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"product": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"product_id": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17-4.p2.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product_id": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17-4.p2.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17-4.p2.el10_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.17-4.p2.el10_2.aarch64",
"product": {
"name": "sudo-0:1.9.17-4.p2.el10_2.aarch64",
"product_id": "sudo-0:1.9.17-4.p2.el10_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17-4.p2.el10_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"product": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"product_id": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17-4.p2.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"product_id": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17-4.p2.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17-4.p2.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17-4.p2.el10_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"product": {
"name": "sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_id": "sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17-4.p2.el10_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"product": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"product_id": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17-4.p2.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"product": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"product_id": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17-4.p2.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product_id": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17-4.p2.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17-4.p2.el10_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.17-4.p2.el10_2.s390x",
"product": {
"name": "sudo-0:1.9.17-4.p2.el10_2.s390x",
"product_id": "sudo-0:1.9.17-4.p2.el10_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17-4.p2.el10_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"product": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"product_id": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17-4.p2.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"product_id": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17-4.p2.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product_id": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17-4.p2.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17-4.p2.el10_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-0:1.9.17-4.p2.el10_2.x86_64",
"product": {
"name": "sudo-0:1.9.17-4.p2.el10_2.x86_64",
"product_id": "sudo-0:1.9.17-4.p2.el10_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17-4.p2.el10_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17-4.p2.el10_2.src",
"product": {
"name": "sudo-0:1.9.17-4.p2.el10_2.src",
"product_id": "sudo-0:1.9.17-4.p2.el10_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17-4.p2.el10_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 10)",
"product_id": "AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "AppStream-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17-4.p2.el10_2.src as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.src"
},
"product_reference": "sudo-0:1.9.17-4.p2.el10_2.src",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"relates_to_product_reference": "BaseOS-10.2.Z"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 10)",
"product_id": "BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"relates_to_product_reference": "BaseOS-10.2.Z"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.src",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T13:41:20+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.src",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19067"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-0:1.9.17-4.p2.el10_2.x86_64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"AppStream-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.src",
"BaseOS-10.2.Z:sudo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debuginfo-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-debugsource-0:1.9.17-4.p2.el10_2.x86_64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.aarch64",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.ppc64le",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.s390x",
"BaseOS-10.2.Z:sudo-python-plugin-debuginfo-0:1.9.17-4.p2.el10_2.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:19220
Vulnerability from csaf_redhat - Published: 2026-05-19 18:46 - Updated: 2026-07-09 17:47Summary
Red Hat Security Advisory: sudo security update
Severity
Important
Notes
Topic: An update for sudo is now available for Red Hat Enterprise Linux 9.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.
Security Fix(es):
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
12 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for sudo is now available for Red Hat Enterprise Linux 9.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged commands, which are used for system management purposes, without having to log in as root.\n\nSecurity Fix(es):\n\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:19220",
"url": "https://access.redhat.com/errata/RHSA-2026:19220"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_19220.json"
}
],
"title": "Red Hat Security Advisory: sudo security update",
"tracking": {
"current_release_date": "2026-07-09T17:47:27+00:00",
"generator": {
"date": "2026-07-09T17:47:27+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:19220",
"initial_release_date": "2026-05-19T18:46:07+00:00",
"revision_history": [
{
"date": "2026-05-19T18:46:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-19T18:46:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:47:27+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:enterprise_linux:9::appstream"
}
}
},
{
"category": "product_name",
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product": {
"name": "Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:9::baseos"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17p2-3.el9_8.x86_64",
"product": {
"name": "sudo-0:1.9.17p2-3.el9_8.x86_64",
"product_id": "sudo-0:1.9.17p2-3.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17p2-3.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"product": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"product_id": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17p2-3.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product_id": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17p2-3.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17p2-3.el9_8?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"product": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"product_id": "sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17p2-3.el9_8?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17p2-3.el9_8.src",
"product": {
"name": "sudo-0:1.9.17p2-3.el9_8.src",
"product_id": "sudo-0:1.9.17p2-3.el9_8.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17p2-3.el9_8?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17p2-3.el9_8.aarch64",
"product": {
"name": "sudo-0:1.9.17p2-3.el9_8.aarch64",
"product_id": "sudo-0:1.9.17p2-3.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17p2-3.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"product": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"product_id": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17p2-3.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product_id": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17p2-3.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17p2-3.el9_8?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"product": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"product_id": "sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17p2-3.el9_8?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17p2-3.el9_8.ppc64le",
"product": {
"name": "sudo-0:1.9.17p2-3.el9_8.ppc64le",
"product_id": "sudo-0:1.9.17p2-3.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17p2-3.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"product": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"product_id": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17p2-3.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product_id": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17p2-3.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17p2-3.el9_8?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"product": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"product_id": "sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17p2-3.el9_8?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "sudo-0:1.9.17p2-3.el9_8.s390x",
"product": {
"name": "sudo-0:1.9.17p2-3.el9_8.s390x",
"product_id": "sudo-0:1.9.17p2-3.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo@1.9.17p2-3.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"product": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"product_id": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debugsource@1.9.17p2-3.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product_id": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-debuginfo@1.9.17p2-3.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product_id": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin-debuginfo@1.9.17p2-3.el9_8?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"product": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"product_id": "sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/sudo-python-plugin@1.9.17p2-3.el9_8?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 9)",
"product_id": "AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "AppStream-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17p2-3.el9_8.src as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.src"
},
"product_reference": "sudo-0:1.9.17p2-3.el9_8.src",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64 as a component of Red Hat Enterprise Linux BaseOS (v. 9)",
"product_id": "BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
},
"product_reference": "sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"relates_to_product_reference": "BaseOS-9.8.0.Z.MAIN.EUS"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-19T18:46:07+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:19220"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-0:1.9.17p2-3.el9_8.x86_64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"AppStream-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.src",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debuginfo-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-debugsource-0:1.9.17p2-3.el9_8.x86_64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.aarch64",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.ppc64le",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.s390x",
"BaseOS-9.8.0.Z.MAIN.EUS:sudo-python-plugin-debuginfo-0:1.9.17p2-3.el9_8.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:20040
Vulnerability from csaf_redhat - Published: 2026-05-27 16:06 - Updated: 2026-07-09 17:55Summary
Red Hat Security Advisory: OpenShift Container Platform 4.19.32 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.19.32 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.19.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.19.32. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:20039
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/
Security Fix(es):
* openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)
* libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)
* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
* libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
References
47 references
Acknowledgments
Elhanan Haenel
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.19.32 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.19.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.19.32. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:20039\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nSecurity Fix(es):\n\n* openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)\n* libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing (CVE-2026-4424)\n* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)\n* OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode (CVE-2026-35385)\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n* libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing (CVE-2026-5121)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20040",
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "2454469",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20040.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.19.32 bug fix and security update",
"tracking": {
"current_release_date": "2026-07-09T17:55:37+00:00",
"generator": {
"date": "2026-07-09T17:55:37+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:20040",
"initial_release_date": "2026-05-27T16:06:07+00:00",
"revision_history": [
{
"date": "2026-05-27T16:06:07+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-27T16:06:07+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:55:37+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.19",
"product": {
"name": "Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.19::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-4.19.9.6.202605201155-0",
"product": {
"name": "rhcos-aarch64-4.19.9.6.202605201155-0",
"product_id": "rhcos-aarch64-4.19.9.6.202605201155-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202605201155?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-4.19.9.6.202605201155-0",
"product": {
"name": "rhcos-ppc64le-4.19.9.6.202605201155-0",
"product_id": "rhcos-ppc64le-4.19.9.6.202605201155-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202605201155?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-4.19.9.6.202605201155-0",
"product": {
"name": "rhcos-s390x-4.19.9.6.202605201155-0",
"product_id": "rhcos-s390x-4.19.9.6.202605201155-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202605201155?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-4.19.9.6.202605201155-0",
"product": {
"name": "rhcos-x86_64-4.19.9.6.202605201155-0",
"product_id": "rhcos-x86_64-4.19.9.6.202605201155-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@4.19.9.6.202605201155?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-4.19.9.6.202605201155-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0"
},
"product_reference": "rhcos-aarch64-4.19.9.6.202605201155-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-4.19.9.6.202605201155-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0"
},
"product_reference": "rhcos-ppc64le-4.19.9.6.202605201155-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-4.19.9.6.202605201155-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0"
},
"product_reference": "rhcos-s390x-4.19.9.6.202605201155-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-4.19.9.6.202605201155-0 as a component of Red Hat OpenShift Container Platform 4.19",
"product_id": "9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
},
"product_reference": "rhcos-x86_64-4.19.9.6.202605201155-0",
"relates_to_product_reference": "9Base-RHOSE-4.19"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-3497",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-12T19:01:37.007806+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This vulnerability affects the OpenSSH GSSAPI delta as implemented in Red Hat Enterprise Linux and OpenShift Container Platform. An unauthenticated attacker could send a specially crafted GSSAPI message during key exchange, leading to the use of uninitialized variables and potentially undefined behavior. The severity of the impact is dependent on compiler hardening configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "RHBZ#2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://ubuntu.com/security/CVE-2026-3497",
"url": "https://ubuntu.com/security/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/03/12/3",
"url": "https://www.openwall.com/lists/oss-security/2026/03/12/3"
}
],
"release_date": "2026-03-12T18:27:44.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable GSSAPI key exchange in the OpenSSH server configuration. This prevents the server from processing GSSAPI messages, eliminating the vulnerability\u0027s attack surface.\n\nEdit `/etc/ssh/sshd_config` and add or modify the line:\n```\nGSSAPIKeyExchange no\n```\n\nAfter saving the changes, restart the `sshd` service for the mitigation to take effect. This action will prevent users from authenticating via GSSAPI.\n\n```\n# systemctl restart sshd\n```",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-4424",
"cwe": {
"id": "CWE-125",
"name": "Out-of-bounds Read"
},
"discovery_date": "2026-03-19T12:22:21.740000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2449006"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. This heap out-of-bounds read vulnerability exists in the RAR archive processing logic due to improper validation of the LZSS sliding window size after transitions between compression methods. A remote attacker can exploit this by providing a specially crafted RAR archive, leading to the disclosure of sensitive heap memory information without requiring authentication or user interaction.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This heap out-of-bounds read vulnerability in libarchive\u0027s RAR archive processing logic can lead to information disclosure. A remote attacker can exploit this flaw by providing a specially crafted RAR archive, potentially revealing sensitive heap memory information without requiring authentication or user interaction on systems that process untrusted archives.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-4424"
},
{
"category": "external",
"summary": "RHBZ#2449006",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2449006"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-4424",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-4424"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-4424"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2898",
"url": "https://github.com/libarchive/libarchive/pull/2898"
}
],
"release_date": "2026-03-19T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "libarchive: libarchive: Information disclosure via heap out-of-bounds read in RAR archive processing"
},
{
"acknowledgments": [
{
"names": [
"Elhanan Haenel"
]
}
],
"cve": "CVE-2026-5121",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"discovery_date": "2026-03-30T07:40:25.358335+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2452945"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in libarchive. On 32-bit systems, an integer overflow vulnerability exists in the zisofs block pointer allocation logic. A remote attacker can exploit this by providing a specially crafted ISO9660 image, which can lead to a heap buffer overflow. This could potentially allow for arbitrary code execution on the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: An integer overflow flaw in `libarchive` on 32-bit systems can lead to a heap buffer overflow. This vulnerability occurs when processing a specially crafted ISO9660 image, allowing an attacker to potentially execute arbitrary code. Red Hat Enterprise Linux 64-bit systems are not affected by this flaw.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-5121"
},
{
"category": "external",
"summary": "RHBZ#2452945",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2452945"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-5121",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-5121"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-5121"
},
{
"category": "external",
"summary": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc",
"url": "https://github.com/advisories/GHSA-2vwv-vqpv-v8vc"
},
{
"category": "external",
"summary": "https://github.com/libarchive/libarchive/pull/2934",
"url": "https://github.com/libarchive/libarchive/pull/2934"
}
],
"release_date": "2026-03-30T07:44:15.222000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "workaround",
"details": "To mitigate this issue, avoid processing untrusted ISO9660 images with applications that utilize `libarchive`. Users should only extract or read content from ISO images obtained from trusted sources.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "libarchive: libarchive: Arbitrary code execution via integer overflow in ISO9660 image processing"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-18T19:02:13.823002+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "RHBZ#2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
}
],
"release_date": "2026-03-18T17:59:02.045000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
},
{
"cve": "CVE-2026-35385",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-04-02T17:01:07.052864+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454469"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenSSH. When the `scp` command is used by a root user to download a file with the legacy protocol option (`-O`) and without preserving original file permissions (`-p`), the downloaded file can be installed with elevated privileges (setuid or setgid). This unexpected behavior could allow a malicious file to execute with higher permissions than intended, posing a security risk through potential privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35385"
},
{
"category": "external",
"summary": "RHBZ#2454469",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454469"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35385",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35385"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35385"
},
{
"category": "external",
"summary": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2",
"url": "https://marc.info/?l=openssh-unix-dev\u0026m=177513443901484\u0026w=2"
},
{
"category": "external",
"summary": "https://www.openssh.org/releasenotes.html#10.3p1",
"url": "https://www.openssh.org/releasenotes.html#10.3p1"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/04/02/3",
"url": "https://www.openwall.com/lists/oss-security/2026/04/02/3"
}
],
"release_date": "2026-04-02T16:30:59.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "OpenSSH: OpenSSH: Privilege escalation via scp legacy protocol when not preserving file mode"
},
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-27T16:06:07+00:00",
"details": "For OpenShift Container Platform 4.19 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:1bd5ad0745f446a798a4038e4d04cf651213f71bc4e76dd9349f5c6968135f9b\n\n (For s390x architecture)\n The image digest is sha256:e1cd4053fdab99ef5530074cb61596de6d0c3b0fd091763051e93b69b4a47c11\n\n (For ppc64le architecture)\n The image digest is sha256:5fbe6fe21a35a4541ce893b558425dc362678b74521a8cc3ead986f4e7a8021c\n\n (For aarch64 architecture)\n The image digest is sha256:34e28f68135a822d581cb955afb867f600d83e9ed8dd4284847df24e90802d6d\n\nAll OpenShift Container Platform 4.19 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.19/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20040"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.19:rhcos-aarch64-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-ppc64le-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-s390x-4.19.9.6.202605201155-0",
"9Base-RHOSE-4.19:rhcos-x86_64-4.19.9.6.202605201155-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
}
]
}
RHSA-2026:20087
Vulnerability from csaf_redhat - Published: 2026-05-29 18:54 - Updated: 2026-07-09 17:55Summary
Red Hat Security Advisory: OpenShift Container Platform 4.16.63 bug fix and security update
Severity
Important
Notes
Topic: Red Hat OpenShift Container Platform release 4.16.63 is now available with updates to packages and images that fix several bugs and add enhancements.
This release includes a security update for Red Hat OpenShift Container Platform 4.16.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.
This advisory contains the container images for Red Hat OpenShift Container Platform 4.16.63. See the following advisory for the RPM packages for this release:
https://access.redhat.com/errata/RHBA-2026:20086
Space precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:
https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/
Security Fix(es):
* openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)
* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)
* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
All OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0 | — |
Vendor Fix
fix
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0 | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the Linux kernel's networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.
7.0 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Linux kernel's XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.
7.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: 9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0 | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
References
36 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Red Hat OpenShift Container Platform release 4.16.63 is now available with updates to packages and images that fix several bugs and add enhancements.\n\nThis release includes a security update for Red Hat OpenShift Container Platform 4.16.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "Red Hat OpenShift Container Platform is Red Hat\u0027s cloud computing Kubernetes application platform solution designed for on-premise or private cloud deployments.\n\nThis advisory contains the container images for Red Hat OpenShift Container Platform 4.16.63. See the following advisory for the RPM packages for this release:\n\nhttps://access.redhat.com/errata/RHBA-2026:20086\n\nSpace precludes documenting all of the container images in this advisory. See the following Release Notes documentation, which will be updated shortly for this release, for details about these changes:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nSecurity Fix(es):\n\n* openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables (CVE-2026-3497)\n* nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination (CVE-2026-27135)\n* sudo: Sudo: Privilege escalation due to failure in privilege drop calls (CVE-2026-35535)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:20087",
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_20087.json"
}
],
"title": "Red Hat Security Advisory: OpenShift Container Platform 4.16.63 bug fix and security update",
"tracking": {
"current_release_date": "2026-07-09T17:55:38+00:00",
"generator": {
"date": "2026-07-09T17:55:38+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.2"
}
},
"id": "RHSA-2026:20087",
"initial_release_date": "2026-05-29T18:54:41+00:00",
"revision_history": [
{
"date": "2026-05-29T18:54:41+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-05-29T18:54:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-07-09T17:55:38+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat OpenShift Container Platform 4.16",
"product": {
"name": "Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift:4.16::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat OpenShift Enterprise"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-aarch64-416.94.202605200242-0",
"product": {
"name": "rhcos-aarch64-416.94.202605200242-0",
"product_id": "rhcos-aarch64-416.94.202605200242-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202605200242?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-ppc64le-416.94.202605200242-0",
"product": {
"name": "rhcos-ppc64le-416.94.202605200242-0",
"product_id": "rhcos-ppc64le-416.94.202605200242-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202605200242?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-s390x-416.94.202605200242-0",
"product": {
"name": "rhcos-s390x-416.94.202605200242-0",
"product_id": "rhcos-s390x-416.94.202605200242-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202605200242?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "rhcos-x86_64-416.94.202605200242-0",
"product": {
"name": "rhcos-x86_64-416.94.202605200242-0",
"product_id": "rhcos-x86_64-416.94.202605200242-0",
"product_identification_helper": {
"purl": "pkg:generic/redhat/rhcos@416.94.202605200242?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-aarch64-416.94.202605200242-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0"
},
"product_reference": "rhcos-aarch64-416.94.202605200242-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-ppc64le-416.94.202605200242-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0"
},
"product_reference": "rhcos-ppc64le-416.94.202605200242-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-s390x-416.94.202605200242-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0"
},
"product_reference": "rhcos-s390x-416.94.202605200242-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "rhcos-x86_64-416.94.202605200242-0 as a component of Red Hat OpenShift Container Platform 4.16",
"product_id": "9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
},
"product_reference": "rhcos-x86_64-416.94.202605200242-0",
"relates_to_product_reference": "9Base-RHOSE-4.16"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-3497",
"cwe": {
"id": "CWE-824",
"name": "Access of Uninitialized Pointer"
},
"discovery_date": "2026-03-12T19:01:37.007806+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2447085"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the OpenSSH GSSAPI (Generic Security Service Application Program Interface) delta patches, as included in various Linux distributions. A remote attacker could exploit this by sending an unexpected GSSAPI message type during the key exchange process. This occurs because the `sshpkt_disconnect()` function, when called on an error, does not properly terminate the process, leading to the continued execution of the program with uninitialized connection variables. Accessing these uninitialized variables can lead to undefined behavior, potentially resulting in information disclosure or a denial of service.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "IMPORTANT: This vulnerability affects the OpenSSH GSSAPI delta as implemented in Red Hat Enterprise Linux and OpenShift Container Platform. An unauthenticated attacker could send a specially crafted GSSAPI message during key exchange, leading to the use of uninitialized variables and potentially undefined behavior. The severity of the impact is dependent on compiler hardening configurations.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-3497"
},
{
"category": "external",
"summary": "RHBZ#2447085",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2447085"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-3497",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-3497"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://ubuntu.com/security/CVE-2026-3497",
"url": "https://ubuntu.com/security/CVE-2026-3497"
},
{
"category": "external",
"summary": "https://www.openwall.com/lists/oss-security/2026/03/12/3",
"url": "https://www.openwall.com/lists/oss-security/2026/03/12/3"
}
],
"release_date": "2026-03-12T18:27:44.917000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-29T18:54:41+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0a3e0b4e23d509a31b7a58162a4336d24c9b899a6de9aac2f930f6b558f9e4d7\n\n (For s390x architecture)\n The image digest is sha256:818c1d9fb15d05bb7d6104e8aa7fca18bb46666d4eb53951680ef445d752f0ac\n\n (For ppc64le architecture)\n The image digest is sha256:6f2c9e2402f4a8b128c0239e3aee44a4b4735a9d558d18f06fe4e3d4f5bc5c98\n\n (For aarch64 architecture)\n The image digest is sha256:746dd9a75ac3c9ed743d63b32c12de3484f74addadb1b5a00dbb004918406ba3\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "workaround",
"details": "To mitigate this issue, disable GSSAPI key exchange in the OpenSSH server configuration. This prevents the server from processing GSSAPI messages, eliminating the vulnerability\u0027s attack surface.\n\nEdit `/etc/ssh/sshd_config` and add or modify the line:\n```\nGSSAPIKeyExchange no\n```\n\nAfter saving the changes, restart the `sshd` service for the mitigation to take effect. This action will prevent users from authenticating via GSSAPI.\n\n```\n# systemctl restart sshd\n```",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "openssh: OpenSSH GSSAPI: Information disclosure or denial of service due to uninitialized variables"
},
{
"cve": "CVE-2026-27135",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-03-18T19:02:13.823002+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2448754"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in nghttp2. Due to missing internal state validation, the library continues to process incoming data even after a session has been terminated. A remote attacker could exploit this by sending a specially crafted HTTP/2 frame, leading to an assertion failure and a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27135"
},
{
"category": "external",
"summary": "RHBZ#2448754",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2448754"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27135",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27135"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27135"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1",
"url": "https://github.com/nghttp2/nghttp2/commit/5c7df8fa815ac1004d9ecb9d1f7595c4d37f46e1"
},
{
"category": "external",
"summary": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6",
"url": "https://github.com/nghttp2/nghttp2/security/advisories/GHSA-6933-cjhr-5qg6"
}
],
"release_date": "2026-03-18T17:59:02.045000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-29T18:54:41+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0a3e0b4e23d509a31b7a58162a4336d24c9b899a6de9aac2f930f6b558f9e4d7\n\n (For s390x architecture)\n The image digest is sha256:818c1d9fb15d05bb7d6104e8aa7fca18bb46666d4eb53951680ef445d752f0ac\n\n (For ppc64le architecture)\n The image digest is sha256:6f2c9e2402f4a8b128c0239e3aee44a4b4735a9d558d18f06fe4e3d4f5bc5c98\n\n (For aarch64 architecture)\n The image digest is sha256:746dd9a75ac3c9ed743d63b32c12de3484f74addadb1b5a00dbb004918406ba3\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "nghttp2: nghttp2: Denial of Service via malformed HTTP/2 frames after session termination"
},
{
"cve": "CVE-2026-35535",
"cwe": {
"id": "CWE-272",
"name": "Least Privilege Violation"
},
"discovery_date": "2026-04-03T03:01:03.124541+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2454714"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Sudo. A local user could exploit a failure in the setuid, setgid, or setgroups calls, which are used to drop privileges before running the mailer. This oversight allows for privilege escalation, enabling the user to gain elevated access on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35535"
},
{
"category": "external",
"summary": "RHBZ#2454714",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2454714"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35535",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35535"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35535"
},
{
"category": "external",
"summary": "https://bugs.debian.org/1130593",
"url": "https://bugs.debian.org/1130593"
},
{
"category": "external",
"summary": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042",
"url": "https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/2143042"
},
{
"category": "external",
"summary": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69",
"url": "https://github.com/sudo-project/sudo/commit/3e474c2f201484be83d994ae10a4e20e8c81bb69"
},
{
"category": "external",
"summary": "https://www.qualys.com/2026/03/10/crack-armor.txt",
"url": "https://www.qualys.com/2026/03/10/crack-armor.txt"
}
],
"release_date": "2026-04-03T02:21:33.584000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-29T18:54:41+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0a3e0b4e23d509a31b7a58162a4336d24c9b899a6de9aac2f930f6b558f9e4d7\n\n (For s390x architecture)\n The image digest is sha256:818c1d9fb15d05bb7d6104e8aa7fca18bb46666d4eb53951680ef445d752f0ac\n\n (For ppc64le architecture)\n The image digest is sha256:6f2c9e2402f4a8b128c0239e3aee44a4b4735a9d558d18f06fe4e3d4f5bc5c98\n\n (For aarch64 architecture)\n The image digest is sha256:746dd9a75ac3c9ed743d63b32c12de3484f74addadb1b5a00dbb004918406ba3\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "sudo: Sudo: Privilege escalation due to failure in privilege drop calls"
},
{
"cve": "CVE-2026-43503",
"cwe": {
"id": "CWE-664",
"name": "Improper Control of a Resource Through its Lifetime"
},
"discovery_date": "2026-05-23T00:00:00+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480902"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s networking (skbuff) component. When skb_try_coalesce() attaches paged fragments, it can lose the SKBFL_SHARED_FRAG marker. This can lead to the Encapsulating Security Payload (ESP) input decrypting data in place over page-cache backed fragments, potentially resulting in data corruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Impact is rated as Important because the privileged file-backed cache pages may be modified through a shared-page ownership bypass. Within Red Hat Enterprise Linux and Red Hat OpenShift Container Platform, this vulnerability was fixed at the same time as CVE-2026-46300.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-43503"
},
{
"category": "external",
"summary": "RHBZ#2480902",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480902"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-43503",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-43503"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-43503"
},
{
"category": "external",
"summary": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox",
"url": "https://git.kernel.org/pub/scm/linux/security/vulns.git/plain/cve/published/2026/CVE-2026-43503.mbox"
}
],
"release_date": "2026-05-23T00:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-29T18:54:41+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0a3e0b4e23d509a31b7a58162a4336d24c9b899a6de9aac2f930f6b558f9e4d7\n\n (For s390x architecture)\n The image digest is sha256:818c1d9fb15d05bb7d6104e8aa7fca18bb46666d4eb53951680ef445d752f0ac\n\n (For ppc64le architecture)\n The image digest is sha256:6f2c9e2402f4a8b128c0239e3aee44a4b4735a9d558d18f06fe4e3d4f5bc5c98\n\n (For aarch64 architecture)\n The image digest is sha256:746dd9a75ac3c9ed743d63b32c12de3484f74addadb1b5a00dbb004918406ba3\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.0,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: net: skbuff: propagate shared-frag marker through frag-transfer helpers"
},
{
"cve": "CVE-2026-46300",
"cwe": {
"id": "CWE-123",
"name": "Write-what-where Condition"
},
"discovery_date": "2026-05-13T13:28:21.270000+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2477015"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem. Unsafe in-place cryptographic processing allows a low-privileged local attacker to write arbitrary bytes into the page cache of read-only files, including sensitive system files. An attacker can exploit this to overwrite privileged binaries and gain root privileges.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This issue is classified as Important, rather than Critical severity, because exploitation requires local access to the system. A low-privileged local attacker can exploit this flaw in the Linux kernel\u0027s XFRM ESP-in-TCP subsystem to gain root privileges by overwriting sensitive system files. Exploitation does not require user interaction, potentially resulting in full compromise of confidentiality, integrity, and availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46300"
},
{
"category": "external",
"summary": "RHBZ#2477015",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2477015"
},
{
"category": "external",
"summary": "RHSB-2026-003",
"url": "https://access.redhat.com/security/vulnerabilities/RHSB-2026-003"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46300",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46300"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46300"
}
],
"release_date": "2026-05-13T12:00:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-05-29T18:54:41+00:00",
"details": "For OpenShift Container Platform 4.16 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update:\n\nhttps://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html/release_notes/\n\nYou may download the oc tool and use it to inspect release image metadata for x86_64, s390x, ppc64le, and aarch64 architectures. The image digests may be found at https://quay.io/repository/openshift-release-dev/ocp-release?tab=tags.\n\nThe sha values for the release are as follows:\n\n (For x86_64 architecture)\n The image digest is sha256:0a3e0b4e23d509a31b7a58162a4336d24c9b899a6de9aac2f930f6b558f9e4d7\n\n (For s390x architecture)\n The image digest is sha256:818c1d9fb15d05bb7d6104e8aa7fca18bb46666d4eb53951680ef445d752f0ac\n\n (For ppc64le architecture)\n The image digest is sha256:6f2c9e2402f4a8b128c0239e3aee44a4b4735a9d558d18f06fe4e3d4f5bc5c98\n\n (For aarch64 architecture)\n The image digest is sha256:746dd9a75ac3c9ed743d63b32c12de3484f74addadb1b5a00dbb004918406ba3\n\nAll OpenShift Container Platform 4.16 users are advised to upgrade to these updated packages and images when they are available in the appropriate release channel. To check for available updates, use the OpenShift CLI (oc) or web console. Instructions for upgrading a cluster are available at https://docs.redhat.com/en/documentation/openshift_container_platform/4.16/html-single/updating_clusters/index#updating-cluster-cli.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:20087"
},
{
"category": "workaround",
"details": "See the security bulletin for a detailed mitigation procedure.",
"product_ids": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"9Base-RHOSE-4.16:rhcos-aarch64-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-ppc64le-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-s390x-416.94.202605200242-0",
"9Base-RHOSE-4.16:rhcos-x86_64-416.94.202605200242-0"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "kernel: \"Fragnesia\" is a variant of Dirty Frag vulnerability in the ESP/XFRM leading to Local Privilege Escalation (LPE) vulnerability in the Linux kernel"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…