# sudo security updates

Patch Radar has 81 security fixes for sudo, closing 21 CVEs, 2 of which are being exploited. The newest is sudo 1.9.15p5-3ubuntu5.24.04.4 (1.9.15p5-3ubuntu5.24.04.4), released October 8, 2026.

- Web page: https://patchblox.com/security/product/linux/sudo
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [sudo 1.9.15p5-3ubuntu5.24.04.4](https://patchblox.com/security/data/fix/linux/ubuntu-noble-sudo-1.9.15p5-3ubuntu5.24.04.4.md) | Oct 8, 2026 | Ubuntu 24.04.5 LTS (noble) 1.9.15p5-3ubuntu5.24.04.4 | High | 1 | 0 |
| [sudo 1.9.9-1ubuntu2.7](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.7.md) | Oct 8, 2026 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.7 | High | 1 | 0 |
| [RHSA-2026:75571](https://patchblox.com/security/data/fix/linux/rhsa-2026-75571.md) | Oct 5, 2026 | RHEL 9 0:1.9.17p2-3.el9_8.3 | High | 1 | 0 |
| [RHSA-2026:86633](https://patchblox.com/security/data/fix/linux/rhsa-2026-86633.md) | Oct 5, 2026 | RHEL 10 1.9.15-8.p5.el10_0.5 | High | 1 | 0 |
| [RHSA-2026:75580](https://patchblox.com/security/data/fix/linux/rhsa-2026-75580.md) | Oct 5, 2026 | RHEL 8 0:1.9.5p2-2.el8_10 | High | 1 | 0 |
| [DEBIAN-CVE-2026-96512](https://patchblox.com/security/data/fix/linux/debian-cve-2026-96512.md) | Oct 5, 2026 | Debian 14 1.9.17p2-9 | High | 1 | 0 |
| [sudo 1.9.15p5-3ubuntu5.24.04.3](https://patchblox.com/security/data/fix/linux/ubuntu-noble-sudo-1.9.15p5-3ubuntu5.24.04.3.md) | Sep 23, 2026 | Ubuntu 24.04.5 LTS (noble) 1.9.15p5-3ubuntu5.24.04.3 | High | 1 | 0 |
| [RHSA-2026:69123](https://patchblox.com/security/data/fix/linux/rhsa-2026-69123.md) | Sep 22, 2026 | RHEL 9 0:1.9.17p2-3.el9_8.1 | High | 1 | 0 |
| [RHSA-2026:71354](https://patchblox.com/security/data/fix/linux/rhsa-2026-71354.md) | Sep 18, 2026 | RHEL 10 1.9.15-8.p5.el10_0.4 | High | 1 | 0 |
| [RHSA-2026:19220](https://patchblox.com/security/data/fix/linux/rhsa-2026-19220.md) | May 15, 2026 | RHEL 9 0:1.9.17p2-3.el9_8 | High | 1 | 0 |
| [RHSA-2026:13888](https://patchblox.com/security/data/fix/linux/rhsa-2026-13888.md) | Apr 30, 2026 | RHEL 10 1.9.15-8.p5.el10_0.3 | High | 1 | 0 |
| [RHSA-2026:11521](https://patchblox.com/security/data/fix/linux/rhsa-2026-11521.md) | Apr 30, 2026 | RHEL 8 0:1.9.5p2-1.el8_10.5 | High | 1 | 0 |
| [sudo 1.9.17p2-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-questing-sudo-1.9.17p2-1ubuntu1.1.md) | Apr 15, 2026 | Ubuntu 25.10 (questing) 1.9.17p2-1ubuntu1.1 | High | 1 | 0 |
| [sudo 1.9.15p5-3ubuntu5.24.04.2](https://patchblox.com/security/data/fix/linux/ubuntu-noble-sudo-1.9.15p5-3ubuntu5.24.04.2.md) | Apr 15, 2026 | Ubuntu 24.04.5 LTS (noble) 1.9.15p5-3ubuntu5.24.04.2 | High | 1 | 0 |
| [sudo 1.9.9-1ubuntu2.6](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.6.md) | Apr 15, 2026 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.6 | High | 1 | 0 |
| [DEBIAN-CVE-2026-35535](https://patchblox.com/security/data/fix/linux/debian-cve-2026-35535.md) | Apr 3, 2026 | Debian 12.15 (bookworm) 1.9.13p3-1+deb12u4 | High | 1 | 0 |
| [DEBIAN-CVE-2026-35535](https://patchblox.com/security/data/fix/linux/debian-cve-2026-35535.md) | Apr 3, 2026 | Debian 13.5 (trixie) 1.9.16p2-3+deb13u2 | High | 1 | 0 |
| [DEBIAN-CVE-2026-35535](https://patchblox.com/security/data/fix/linux/debian-cve-2026-35535.md) | Apr 3, 2026 | Debian 14 1.9.17p2-5 | High | 1 | 0 |
| [DLA-4472-1](https://patchblox.com/security/data/fix/linux/dla-4472-1.md) | Feb 6, 2026 | Debian 11.6 (bullseye) 1.9.5p2-3+deb11u3 | Routine | 1 | 0 |
| [sudo 1.9.16p2-1ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-sudo-1.9.16p2-1ubuntu1.1.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 1.9.16p2-1ubuntu1.1 | Patch now | 2 | 1 |
| [sudo 1.9.15p5-3ubuntu5.24.10.1](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-sudo-1.9.15p5-3ubuntu5.24.10.1.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 1.9.15p5-3ubuntu5.24.10.1 | Patch now | 2 | 1 |
| [sudo 1.9.4p2-2ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-sudo-1.9.4p2-2ubuntu2.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 1.9.4p2-2ubuntu2 | Routine | 1 | 0 |
| [sudo 1.9.13p1-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-plucky-sudo-1.9.13p1-1ubuntu2.md) | Jan 16, 2026 | Ubuntu 25.04 (plucky) 1.9.13p1-1ubuntu2 | Routine | 2 | 0 |
| [sudo 1.9.13p1-1ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-sudo-1.9.13p1-1ubuntu2.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 1.9.13p1-1ubuntu2 | Routine | 2 | 0 |
| [sudo 1.9.4p2-2ubuntu2](https://patchblox.com/security/data/fix/linux/ubuntu-oracular-sudo-1.9.4p2-2ubuntu2.md) | Jan 16, 2026 | Ubuntu 24.10 (oracular) 1.9.4p2-2ubuntu2 | Routine | 1 | 0 |
| [RHSA-2025:10110](https://patchblox.com/security/data/fix/linux/rhsa-2025-10110.md) | Jul 1, 2025 | RHEL 8 0:1.9.5p2-1.el8_10.1 | High | 1 | 0 |
| [DEBIAN-CVE-2025-32463](https://patchblox.com/security/data/fix/linux/debian-cve-2025-32463.md) | Jun 30, 2025 | Debian 13.5 (trixie) 1.9.16p2-3 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2025-32463](https://patchblox.com/security/data/fix/linux/debian-cve-2025-32463.md) | Jun 30, 2025 | Debian 14 1.9.16p2-3 | Patch now | 1 | 1 |
| [DEBIAN-CVE-2025-32462](https://patchblox.com/security/data/fix/linux/debian-cve-2025-32462.md) | Jun 30, 2025 | Debian 13.5 (trixie) 1.9.16p2-3 | High | 1 | 0 |
| [DEBIAN-CVE-2025-32462](https://patchblox.com/security/data/fix/linux/debian-cve-2025-32462.md) | Jun 30, 2025 | Debian 14 1.9.16p2-3 | High | 1 | 0 |
| [RHSA-2025:11537](https://patchblox.com/security/data/fix/linux/rhsa-2025-11537.md) | Jun 30, 2025 | RHEL 10 1.9.15-8.p5.el10_0.2 | Patch now | 2 | 1 |
| [sudo 1.9.15p5-3ubuntu5.24.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-sudo-1.9.15p5-3ubuntu5.24.04.1.md) | Jun 30, 2025 | Ubuntu 24.04.5 LTS (noble) 1.9.15p5-3ubuntu5.24.04.1 | Patch now | 2 | 1 |
| [sudo 1.8.21p2-3ubuntu1.6+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.6-esm1.md) | Jun 30, 2025 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.6+esm1 | High | 1 | 0 |
| [sudo 1.8.31-1ubuntu1.5+esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sudo-1.8.31-1ubuntu1.5-esm1.md) | Jun 30, 2025 | Ubuntu 20.04 LTS (focal) 1.8.31-1ubuntu1.5+esm1 | High | 1 | 0 |
| [sudo 1.9.9-1ubuntu2.5](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.5.md) | Jun 30, 2025 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.5 | High | 1 | 0 |
| [DLA-4235-1](https://patchblox.com/security/data/fix/linux/dla-4235-1.md) | Jun 30, 2025 | Debian 11.6 (bullseye) 1.9.5p2-3+deb11u2 | High | 1 | 0 |
| [DSA-5954-1](https://patchblox.com/security/data/fix/linux/dsa-5954-1.md) | Jun 30, 2025 | Debian 12.15 (bookworm) 1.9.13p3-1+deb12u2 | High | 1 | 0 |
| [RHSA-2025:9978](https://patchblox.com/security/data/fix/linux/rhsa-2025-9978.md) | Jun 30, 2025 | RHEL 9 0:1.9.5p2-10.el9_6.1 | High | 1 | 0 |
| [RHSA-2024:0811](https://patchblox.com/security/data/fix/linux/rhsa-2024-0811.md) | Feb 14, 2024 | RHEL 8 0:1.9.5p2-1.el8_9 | High | 3 | 0 |
| [RHSA-2024:0811](https://patchblox.com/security/data/fix/linux/rhsa-2024-0811.md) | Feb 14, 2024 | RHEL 9 0:1.9.5p2-10.el9_3 | High | 3 | 0 |
| [DEBIAN-CVE-2023-7090](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7090.md) | Dec 23, 2023 | Debian 12.15 (bookworm) 1.8.28p1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-7090](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7090.md) | Dec 23, 2023 | Debian 13.5 (trixie) 1.8.28p1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-7090](https://patchblox.com/security/data/fix/linux/debian-cve-2023-7090.md) | Dec 23, 2023 | Debian 14 1.8.28p1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-42465](https://patchblox.com/security/data/fix/linux/debian-cve-2023-42465.md) | Dec 22, 2023 | Debian 13.5 (trixie) 1.9.15p2-2 | High | 1 | 0 |
| [DEBIAN-CVE-2023-42465](https://patchblox.com/security/data/fix/linux/debian-cve-2023-42465.md) | Dec 22, 2023 | Debian 14 1.9.15p2-2 | High | 1 | 0 |
| [DEBIAN-CVE-2023-28487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28487.md) | Mar 16, 2023 | Debian 12.15 (bookworm) 1.9.13p1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-28487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28487.md) | Mar 16, 2023 | Debian 13.5 (trixie) 1.9.13p1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-28487](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28487.md) | Mar 16, 2023 | Debian 14 1.9.13p1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-28486](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28486.md) | Mar 16, 2023 | Debian 14 1.9.13p1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-28486](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28486.md) | Mar 16, 2023 | Debian 12.15 (bookworm) 1.9.13p1-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2023-28486](https://patchblox.com/security/data/fix/linux/debian-cve-2023-28486.md) | Mar 16, 2023 | Debian 13.5 (trixie) 1.9.13p1-1 | Routine | 1 | 0 |
| [sudo 1.8.21p2-3ubuntu1.6](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.6.md) | Mar 15, 2023 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.6 | Routine | 2 | 0 |
| [sudo 1.8.31-1ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sudo-1.8.31-1ubuntu1.5.md) | Mar 15, 2023 | Ubuntu 20.04 LTS (focal) 1.8.31-1ubuntu1.5 | Routine | 2 | 0 |
| [sudo 1.9.9-1ubuntu2.4](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.4.md) | Mar 15, 2023 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.4 | Routine | 2 | 0 |
| [DEBIAN-CVE-2023-27320](https://patchblox.com/security/data/fix/linux/debian-cve-2023-27320.md) | Feb 28, 2023 | Debian 12.15 (bookworm) 1.9.13p3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-27320](https://patchblox.com/security/data/fix/linux/debian-cve-2023-27320.md) | Feb 28, 2023 | Debian 13.5 (trixie) 1.9.13p3-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-27320](https://patchblox.com/security/data/fix/linux/debian-cve-2023-27320.md) | Feb 28, 2023 | Debian 14 1.9.13p3-1 | High | 1 | 0 |
| [sudo 1.9.9-1ubuntu2.3](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.3.md) | Feb 28, 2023 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.3 | High | 1 | 0 |
| [RHSA-2023:0282](https://patchblox.com/security/data/fix/linux/rhsa-2023-0282.md) | Jan 23, 2023 | RHEL 9 0:1.9.5p2-7.el9_1.1 | High | 1 | 0 |
| [RHSA-2023:0284](https://patchblox.com/security/data/fix/linux/rhsa-2023-0284.md) | Jan 23, 2023 | RHEL 8 0:1.8.29-8.el8_7.1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-22809](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22809.md) | Jan 18, 2023 | Debian 12.15 (bookworm) 1.9.12p2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-22809](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22809.md) | Jan 18, 2023 | Debian 13.5 (trixie) 1.9.12p2-1 | High | 1 | 0 |
| [DEBIAN-CVE-2023-22809](https://patchblox.com/security/data/fix/linux/debian-cve-2023-22809.md) | Jan 18, 2023 | Debian 14 1.9.12p2-1 | High | 1 | 0 |
| [DSA-5321-1](https://patchblox.com/security/data/fix/linux/dsa-5321-1.md) | Jan 18, 2023 | Debian 11.6 (bullseye) 1.9.5p2-3+deb11u1 | High | 1 | 0 |
| [sudo 1.9.9-1ubuntu2.2](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-sudo-1.9.9-1ubuntu2.2.md) | Jan 17, 2023 | Ubuntu 22.04.1 LTS (jammy) 1.9.9-1ubuntu2.2 | High | 2 | 0 |
| [sudo 1.8.21p2-3ubuntu1.5](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.5.md) | Jan 17, 2023 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.5 | High | 1 | 0 |
| [sudo 1.8.31-1ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sudo-1.8.31-1ubuntu1.4.md) | Jan 17, 2023 | Ubuntu 20.04 LTS (focal) 1.8.31-1ubuntu1.4 | High | 1 | 0 |
| [DEBIAN-CVE-2022-43995](https://patchblox.com/security/data/fix/linux/debian-cve-2022-43995.md) | Nov 2, 2022 | Debian 12.15 (bookworm) 1.9.12p1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-43995](https://patchblox.com/security/data/fix/linux/debian-cve-2022-43995.md) | Nov 2, 2022 | Debian 13.5 (trixie) 1.9.12p1-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-43995](https://patchblox.com/security/data/fix/linux/debian-cve-2022-43995.md) | Nov 2, 2022 | Debian 14 1.9.12p1-1 | High | 1 | 0 |
| [RHSA-2021:1723](https://patchblox.com/security/data/fix/linux/rhsa-2021-1723.md) | May 18, 2021 | RHEL 8 0:1.8.29-7.el8 | High | 2 | 0 |
| [sudo 1.8.21p2-3ubuntu1.4](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.4.md) | Jan 26, 2021 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.4 | Patch now | 2 | 1 |
| [sudo 1.8.31-1ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sudo-1.8.31-1ubuntu1.2.md) | Jan 26, 2021 | Ubuntu 20.04 LTS (focal) 1.8.31-1ubuntu1.2 | Patch now | 2 | 1 |
| [RHSA-2021:0218](https://patchblox.com/security/data/fix/linux/rhsa-2021-0218.md) | Jan 26, 2021 | RHEL 8 0:1.8.29-6.el8_3.1 | Patch now | 1 | 1 |
| [RHSA-2020:1804](https://patchblox.com/security/data/fix/linux/rhsa-2020-1804.md) | Apr 28, 2020 | RHEL 8 0:1.8.29-5.el8 | High | 2 | 0 |
| [RHSA-2020:0487](https://patchblox.com/security/data/fix/linux/rhsa-2020-0487.md) | Feb 14, 2020 | RHEL 8 0:1.8.25p1-8.el8_1.1 | High | 1 | 0 |
| [sudo 1.8.21p2-3ubuntu1.2](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.2.md) | Jan 30, 2020 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.2 | High | 1 | 0 |
| [sudo 1.8.31-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-sudo-1.8.31-1ubuntu1.md) | Dec 19, 2019 | Ubuntu 20.04 LTS (focal) 1.8.31-1ubuntu1 | High | 2 | 0 |
| [RHSA-2019:3694](https://patchblox.com/security/data/fix/linux/rhsa-2019-3694.md) | Nov 5, 2019 | RHEL 8 0:1.8.25p1-8.el8_1 | High | 1 | 0 |
| [sudo 1.8.21p2-3ubuntu1.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.21p2-3ubuntu1.1.md) | Oct 14, 2019 | Ubuntu 18.04.6 LTS (bionic) 1.8.21p2-3ubuntu1.1 | High | 1 | 0 |
| [sudo 1.8.20p2-1ubuntu1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-sudo-1.8.20p2-1ubuntu1.md) | Jun 4, 2017 | Ubuntu 18.04.6 LTS (bionic) 1.8.20p2-1ubuntu1 | Routine | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo