CentOS 6 ELS: sudo package with the fix for the CVE-2021-23240 gradual rollout - TuxCare

php2shell patches (CVE-2026-109618 and CVE-2026-109619) for EOL PHP are out now. With sales replies slower than usual due to high demand, the fastest route to patched packages is to buy ELS for Runtimes online (opens in new tab). Read the patch FAQ

Go straight to an AI summary of this blog post instead

  • Summarize this post with Perplexity
  • Summarize this post with Gemini

A new updated sudo package with the fix for the CVE-2021-23240 within CentOS 6 ELS has been scheduled for gradual rollout from our production repository.

Rollout slot: 1
Rolled out to: 1%
ETA for 100% rollout: July 20


CHANGELOG

sudo-1.8.6p3-32.el6.cloudlinux.els

  • Fix symbolic link attack in SELinux-enabled sudoedit (CVE-2021-23240)

UPDATE COMMAND

yum update sudo*

IMMEDIATE UPDATE (VIA BYPASS)

yum update sudo* --enablerepo=ELS6-rollout-1-bypass

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.

Table of Contents
Get the open-source security answers you need

Join 4,500+ Linux & Open Source Professionals!

2x a month. No spam.