Unscored DLA-4472-1 2 CVEs

sudo - security update

Published Feb 6, 2026 · Updated Feb 6, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 11	sudo	1.9.5p2-3+deb11u3

Vulnerabilities 2

Unscored —

CVE-2023-28486

Sudo before 1.9.13 does not escape control characters in log messages.

sudo sudo Debian Ubuntu

Mar 16, 2023
Unscored —

CVE-2023-28487

Sudo before 1.9.13 does not escape control characters in sudoreplay output.

sudo sudo Debian Ubuntu

Mar 16, 2023