Linux · Security advisory · April 30, 2026

ELSA-2026-12310: Security update for 2 packages

ELSA-2026-12310, released April 30, 2026, fixes 1 CVE across 2 products. None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0018

7th percentile

Fixed package versions

Product	Release	Fixed in
sudo	ol 9	0:1.9.5p2-15.el9_7
sudo-python-plugin	ol 9	0:1.9.5p2-15.el9_7

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-35535	sudo: This update for sudo fixes the following issue: - CVE-2026-35535: Fixed potential privilege escalation when running...		7.8	0.0018	None reported

Also fixes CVE-2026-35535

RLSA-2026:19067
sudo on rocky 10
RLSA-2026:19220
sudo on rocky 9
ALSA-2026:19067
sudo, sudo-python-plugin on almalinux 10
ALSA-2026:19220
sudo, sudo-python-plugin on almalinux 9
RHSA-2026:19220
sudo, sudo-python-plugin on RHEL 9
RLSA-2026:11521
sudo on rocky 8
RHSA-2026:13888
sudo on RHEL 10
RHSA-2026:11521
sudo on RHEL 8

Vendor advisory

https://linux.oracle.com/errata/ELSA-2026-12310.html

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo