CVE-2023-28486

CVE-2023-28486 affects the sudo utility; the affected component is sudo prior to version 1.9.13, which does not escape control characters in log messages. Multiple connected advisories confirm the issue and subsequent fixes across distributions (e.g., Debian LTS advisory DLA-4472-1 for sudo 1.9.5...

CVE-2023-28487

CVE-2023-28487 affects sudo up to version 1.9.13, where sudoreplay output does not escape control characters. This can enable manipulation of terminal output when viewed. Public details in connected advisories indicate fixes implemented in 1.9.13 and newer across multiple distributions (Debian, A...