Release date:
2026-10-15 10:34:26 UTC
Description:
- Rebase onto the 1.8.23-10.amzn2.3.9 vendor source, which adds CVE-2026-96512: sudo now ignores a user-supplied TZ environment variable when setting its own time zone
- Retain the TuxCare fix in plugins/sudoers/logging.c making a privilege-drop failure in send_mail() fatal before the mailer is executed
- Retain the TuxCare fixes for the temporary-file race in src/sudo_edit.c and src/sesh.c, and the constant-time password comparison in plugins/sudoers/auth
Updated packages:
-
sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.aarch64.rpm
sha:c831328395961f90651e405ac5d0b365b40c13cc306433fbdea49a0c2d2b6d5b
-
sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.i686.rpm
sha:94a8b5775abf26ae6079a7d5bfbbd78a7d8390812877533c9a716c7ab89e57b3
-
sudo-1.8.23-10.amzn2.3.9.tuxcare.els1.x86_64.rpm
sha:f47d911e211a1dded73c31f3a899b184f148eabda49ee719bbf58ef03c2d53b7
-
sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.aarch64.rpm
sha:3c738299ee6e848f5ba9014f70535950a914abb99bdb8d0ddc383790ed904402
-
sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.i686.rpm
sha:a82b761c2b14fbadb8541e7d7c5b1d4a8dff6541debbc44c86214dd9827a8e91
-
sudo-devel-1.8.23-10.amzn2.3.9.tuxcare.els1.x86_64.rpm
sha:80fe47d2415a376adc01cb5f8f7886695e6e39b0ab6f77f840706302620e2090
Notes:
This page is generated automatically and has not been checked for errors. For clarification or
corrections please contact the
CloudLinux Packaging Team.
