3 issues skipped by the security teams:
- CVE-2016-7032: sudo_noexec.so in Sudo before 1.8.15 on Linux might allow local users to bypass intended noexec command restrictions via an application that calls the (1) system or (2) popen function.
- CVE-2015-8239: The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of the called command to replace them before it is executed.
- CVE-2016-7076:
![[bug history graph]](https://qa.debian.org/data/bts/graphs/s/sudo.png){kind=link}