Red Hat Security Advisory

RHSA-2026:14228

sudo security update

Released 2026-05-06 · Red Hat rating Important · View on Red Hat →

Fixed in

Red Hat Enterprise Linux BaseOS AUS (v.8.6) sudo-1.9.5p2-1.el8_6.3
Red Hat Enterprise Linux BaseOS E4S (v.8.6) sudo-1.9.5p2-1.el8_6.3
Red Hat Enterprise Linux BaseOS TUS (v.8.6) sudo-1.9.5p2-1.el8_6.3

Fixes 1 record

TI-2026-27645 CVE-2026-35535 · GHSA-g5fc-f834-rcr2

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups…

LOW 35

In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to privilege escalation.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00177 Published 2026-04-03 Fixed CWE-271