Linux · Security advisory · February 6, 2026

DLA-4472-1: sudo security update

DLA-4472-1, released February 6, 2026, fixes 1 CVE in sudo (version 1.9.5p2-3+deb11u3). None of them is reported as exploited. Patch Radar priority: Routine. The product is no longer supported.

RoutineUnsupported product

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0092

60th percentile

Fixed package versions

Product	Release	Fixed in
sudo	Debian 11.6 (bullseye)	1.9.5p2-3+deb11u3

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
Routine	CVE-2023-28486	sudo: Sudo before 1.9.13 does not escape control characters in log messages.		5.3	0.0092	None reported

Also fixes CVE-2023-28486

ALSA-2024:0811
sudo, sudo-python-plugin on almalinux 9
ELSA-2024-0811
sudo, sudo-python-plugin on ol 8, ol 9
RHSA-2024:0811
sudo, sudo-python-plugin on RHEL 8, RHEL 9
libnss-sudo 1.9.13p1-1ubuntu2
libnss-sudo on Ubuntu 25.04 (plucky)
sudo 1.9.13p1-1ubuntu2
sudo on Ubuntu 25.04 (plucky)
sudo-ldap 1.9.13p1-1ubuntu2
sudo-ldap on Ubuntu 25.04 (plucky)
libnss-sudo 1.9.13p1-1ubuntu2
libnss-sudo on Ubuntu 24.10 (oracular)
sudo 1.9.13p1-1ubuntu2
sudo on Ubuntu 24.10 (oracular)

Vendor advisory

https://security-tracker.debian.org/tracker/CVE-2023-28486

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo