CLSA-2026-1790601456
See a problem?- Import Source
- https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/oraclelinux7els/CLSA-2026-1790601456.json
- JSON Data
- https://api.osv.dev/v1/vulns/CLSA-2026-1790601456
- Upstream
- Published
- 2026-09-28T13:17:45Z
- Modified
- 2026-10-26T09:43:13Z
- Summary
- sudo: Fix of 7 CVEs
- Details
-
- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources
- CVE-2025-32462: take the vendor's fix, keep our audit record of the rejected remote host
- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch); the TuxCare duplicate is dropped
- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486, CVE-2023-28487, CVE-2023-42465
- References
Affected packages
TuxCare:OracleLinux:7 / sudo
Package
- Name
- sudo
- Purl
- pkg:rpm/tuxcare/sudo?distro=oraclelinux-7