Unless the patches have been backported, as is the case for Ubuntu 18.04, in which case it may not need to be 1.9.5p2. https://launchpad.net/ubuntu/+source/sudo/1.8.21p2-3ubuntu1....

how to patch (e.g. ubuntu)? or requires compiling from source?

EDIT: see above post provided by comfydragon