Red Hat Extends sudo and librsvg Fixes to RHEL 8 Streams
Tech GuruQuick Answer
Red Hat published four RHEL 8 extended-stream errata for sudo and librsvg. Inventory 8.4 and 8.6 AUS or EUS Extension systems, install the exact channel packages, validate privilege and image-rendering workflows, and retain repository and change evidence.
Confirm Scope And Apply The Supported Remediation
What to do now: Inventory RHEL 8.4 and 8.6 AUS and EUS Extension hosts, installed sudo and librsvg2 builds, subscribed repositories, privileged workflows, applications, owners, and maintenance windows. Match each host, package and subscription stream to the corresponding RHSA; do not install an 8.4 build on 8.6 or infer that all RHEL 8 channels use these package versions. Install the signed sudo and librsvg2 errata packages from the subscribed Red Hat extended-support repositories and restart affected applications where appropriate. Confirm installed package NEVRAs, test sudo policy and representative SVG rendering, review failed transactions, and retain repository, package and change evidence.
Last verified: 2026-10-29 UTC. Recheck the authoritative advisory and supported distribution channel before changing production.
Scope And Authority
| Product scope | sudo and librsvg2 packages on RHEL 8.4 and 8.6 AUS and EUS Extension streams |
|---|---|
| Advisory | RHSA-2026:92325 / RHSA-2026:92349 / RHSA-2026:92336 / RHSA-2026:92353 |
| CVEs | CVE-2026-96512, CVE-2026-96889 |
| Authoritative release date | 2026-10-29 12:16:10 UTC |
| Authority revision date | 2026-10-29 12:25:15 UTC |
| Affected versions | Advisory-listed RHEL 8.4 and 8.6 AUS or EUS Extension systems with sudo or librsvg2 builds before the fixed errata packages. |
| Fixed version | sudo-1.8.29-7.el8_4.4 or sudo-1.9.5p2-1.el8_6.4, and librsvg2-2.42.7-4.el8_4.1 or librsvg2-2.42.7-4.el8_6.1, as applicable |
| CVSS base score | 7.8 (CVSS v3.1) |
| CVSS severity | Important |
| Exploitation status | Red Hat does not state that these vulnerabilities are being maliciously exploited.; no exploitation claim is inferred. |
What Changed
Red Hat extended sudo CVE-2026-96512 and librsvg CVE-2026-96889 fixes to RHEL 8.4 and 8.6 AUS and EUS Extension channels.
What To Validate Now
- Inventory. Inventory RHEL 8.4 and 8.6 AUS and EUS Extension hosts, installed sudo and librsvg2 builds, subscribed repositories, privileged workflows, applications, owners, and maintenance windows.
- Establish applicability. Match each host, package and subscription stream to the corresponding RHSA; do not install an 8.4 build on 8.6 or infer that all RHEL 8 channels use these package versions.
- Remediate. Install the signed sudo and librsvg2 errata packages from the subscribed Red Hat extended-support repositories and restart affected applications where appropriate.
- Validate. Confirm installed package NEVRAs, test sudo policy and representative SVG rendering, review failed transactions, and retain repository, package and change evidence.
- Retain evidence. Preserve asset and owner identifiers, the applicability decision, before-and-after versions, change approval, installation output, validation results, and any exception or rollback record.
Operational Cautions
Extended-support repositories require the correct entitlement and stream. Preserve sudo access recovery and test rendering consumers before broad deployment.
Evidence To Retain
- Exact product, release stream, package or application version, enabled feature, environment, and accountable owner.
- UTC timestamps, authority revision, approved change record, installer or package-manager output, and resulting version.
- Relevant logs and monitoring evidence, test results, exceptions, compensating controls, and rollback decisions.
Related TechGeeks Resources
Authoritative References
Correction policy: If the authority changes affected versions, fixed versions, severity, exploitation information, mitigations, or required action, TechGeeks will update this notice and its verification date.
