Skip to content
OpenAdvisories
High ELSA-2026-68692 1 CVE

Important: sudo security, bug fix, and enhancement update (Oracle Linux 10)

Published Sep 17, 2026 · Updated Sep 17, 2026

Ecosystem: Oracle Linux

Summary

[1.9.17-6]
- Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass

[1.9.17-5.p2]
- Resolves: RHEL-212546 - Use canonicalized path if user path contains '..'

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 10 sudo 0:1.9.17-10.p2.el10_2.6
Oracle Linux · 10 sudo-python-plugin 0:1.9.17-10.p2.el10_2.6

Vulnerabilities 1

  • High 7.8
    CVE-2026-82474 Public exploit

    Sudo through 1.9.17p2 Intercept Policy Bypass via execveat

    Sudo through 1.9.17p2 fails to apply intercept policy checks to the execveat system call in ptrace-based intercept mode. Users permitted to run specific commands can execute denied programs by calling execveat directly or through fexecve, bypassing policy enf…

    sudo-project sudo sudo sudo Debian Ubuntu Azure Linux