{"id":"CLSA-2026-1790600964","summary":"sudo: Fix of 7 CVEs","details":"- Rebase onto the vendor's sudo-1.8.23-10.0.3.el7_9.3 sources\n- CVE-2025-32462: take the vendor's fix, keep our audit record of the\n  rejected remote host\n- CVE-2026-35535 is now fixed by the vendor (sudo-1.8.23-CVE-2026-35535.patch);\n  the TuxCare duplicate is dropped\n- Retained TuxCare fixes: CVE-2021-23239, CVE-2021-23240, CVE-2023-28486,\n  CVE-2023-28487, CVE-2023-42465","modified":"2026-10-26T09:43:39.785803477Z","published":"2026-09-28T13:09:33Z","upstream":["CVE-2021-23239","CVE-2021-23240","CVE-2023-28486","CVE-2023-28487","CVE-2023-42465","CVE-2025-32462","CVE-2026-35535"],"references":[{"type":"ADVISORY","url":"https://errata.tuxcare.com/els_os/rhel7els/CLSA-2026-1790600964.html"}],"affected":[{"package":{"name":"sudo","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/sudo?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790600964.json"}},{"package":{"name":"sudo-devel","ecosystem":"TuxCare:RHEL:7","purl":"pkg:rpm/tuxcare/sudo-devel?distro=rhel-7"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.8.23-10.0.3.el7_9.3.tuxcare.els1"}]}],"database_specific":{"source":"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/rhel7els/CLSA-2026-1790600964.json"}}],"schema_version":"1.9.0"}