Advisories » MGASA-2026-0531

Updated sudo package fixes security vulnerabilities

Publication date: 22 Oct 2026
Modification date: 22 Oct 2026
Type: security
Affected Mageia releases : 10
CVE: CVE-2026-82474 , CVE-2026-96512

Description

Sudo through 1.9.17p2 Intercept Policy Bypass via execveat.
(CVE-2026-82474)
tz environment variable allows bypass of notbefore/notafter time-based
authorization. (CVE-2026-96512)
                

References

• https://bugs.mageia.org/show_bug.cgi?id=36362
• https://ubuntu.com/security/notices/USN-8803-1
• https://www.openwall.com/lists/oss-security/2026/09/24/4
• https://access.redhat.com/security/cve/CVE-2026-96512
• https://bugzilla.redhat.com/show_bug.cgi?id=2539327
• https://www.cve.org/CVERecord?id=CVE-2026-82474
• https://www.cve.org/CVERecord?id=CVE-2026-96512

SRPMS

10/core

• sudo-1.9.17p1-2.1.mga10