Linux · Security advisory · October 5, 2026

RHSA-2026:86633: sudo security update

RHSA-2026:86633, released October 5, 2026, fixes 1 CVE in sudo (version 1.9.15-8.p5.el10_0.5). None of them is reported as exploited. Patch Radar priority: High.

High

CVEs closed

None rated Critical

Exploited

None reported

Exploitation more likely

Vendor assessment

Highest EPSS

0.0032

25th percentile

Fixed package versions

Product	Release	Fixed in
sudo	RHEL 10	1.9.15-8.p5.el10_0.5

CVEs this fix closes

Priority	CVE	Title	Impact	CVSS	EPSS	Exploitation
High	CVE-2026-96512	Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization		7.8	0.0032	None reported

Also fixes CVE-2026-96512

ALAS2023-2026-3156
sudo, sudo-debuginfo, sudo-debugsource and 5 more on amzn 2023
libnss-sudo 1.9.15p5-3ubuntu5.24.04.4
libnss-sudo on Ubuntu 24.04.5 LTS (noble)
sudo 1.9.15p5-3ubuntu5.24.04.4
sudo on Ubuntu 24.04.5 LTS (noble)
sudo-ldap 1.9.15p5-3ubuntu5.24.04.4
sudo-ldap on Ubuntu 24.04.5 LTS (noble)
sudo 1.9.9-1ubuntu2.7
sudo on Ubuntu 22.04.1 LTS (jammy)
sudo-ldap 1.9.9-1ubuntu2.7
sudo-ldap on Ubuntu 22.04.1 LTS (jammy)
RLSA-2026:75579
sudo on rocky 10
RLSA-2026:75571
sudo on rocky 9

Vendor advisory

https://access.redhat.com/errata/RHSA-2026:86633

For tools and AI agents

This page as data: JSON · Markdown

Which servers are still behind?

Patchblox compares the installed package on every Linux machine against the fixed version for its release, including machines reported through Azure Update Manager.

Get a demo