[El-errata] ELSA-2026-75579 Important: Oracle Linux 10 sudo security update

[Errata Announcements for Oracle Linux]

Oracle Linux Security Advisory ELSA-2026-75579

http://linux.oracle.com/errata/ELSA-2026-75579.html

The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:

x86_64:
sudo-1.9.17-10.p2.el10_2.7.x86_64.rpm
sudo-python-plugin-1.9.17-10.p2.el10_2.7.x86_64.rpm

aarch64:
sudo-1.9.17-10.p2.el10_2.7.aarch64.rpm
sudo-python-plugin-1.9.17-10.p2.el10_2.7.aarch64.rpm


SRPMS:
http://oss.oracle.com/ol10/SRPMS-updates/sudo-1.9.17-10.p2.el10_2.7.src.rpm

Related CVEs:

CVE-2026-96512




Description of changes:

[1.9.17-7]
- CVE-2026-96512 sudo: sudo: TZ environment variable allows bypass of
  NOTBEFORE/NOTAFTER time-based authorization [rhel-10.2.z]

[1.9.17-6]
- Fix CVE-2026-82474: execveat(2) intercept/log_subcmds bypass

[1.9.17-5.p2]
- Resolves: RHEL-212546 - Use canonicalized path if user path contains ".."

[1.9.17-4.p2]
- Bump release number
- Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
  due to failure in privilege drop calls

[1.9.17-3.p2]
- Resolves: RHEL-164620 - CVE-2026-35535 sudo: Sudo: Privilege escalation
  due to failure in privilege drop calls

[1.9.17-2.p2]
- Resolves: RHEL-59136 - sudo passes SHELL environment variable twice to
  the shell being executed [rhel-10]
- Resolves: RHEL-128212 - [RFE] request to backport support for regex in
  sudo [rhel-10]
- Resolves: RHEL-112100 - Rebase of sudo to 1.9.17p2 [rhel-10]

[1.9.17-1.p2]
- Rebase sudo to 1.9.17p2
- Resolves: RHEL-122752

[1.9.15-9.p5]
- RHEL 10.1 ERRATUM
- CVE-2025-32462 sudo: LPE via host option Resolves: RHEL-100009
- CVE-2025-32463 sudo: LPE via chroot option Resolves: RHEL-100022

[1.9.15-8.p5]
- Bump release for October 2024 mass rebuild:

[1.9.15-7.p5]
- RHEL 10.0 ERRATUM
- sudo-1.9.15-2.p5.el10: RHEL SAST Automation: address 4 High impact true
  positive(s) Resolves: RHEL-44436
- sudo subpackage sudo-logsrvd should not be built Resolves: RHEL-52864