High ELSA-2026-12310 1 CVE

Important: sudo security update (Oracle Linux 9)

Published Apr 30, 2026 · Updated Apr 30, 2026

Ecosystem: Oracle Linux

Summary

[1.9.5p2-15]
RHEL 9.7.0 ERRATUM
- CVE-2026-35535 - Privilege escalation due to failure in privilege drop calls
Resolves: RHEL-166065

Fixed packages 2

Release	Package	Fixed in
Oracle Linux · 9	sudo	0:1.9.5p2-15.el9_7
Oracle Linux · 9	sudo-python-plugin	0:1.9.5p2-15.el9_7

Vulnerabilities 1

High 7.4

CVE-2026-35535

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop befo…

sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Wolfi

Apr 3, 2026