> USN-8580-1: AccountsService vulnerabilities

[SOURCE] Ubuntu Security Notices [DATE: 21/07/2026 17:00] [LANGUAGE: EN]

It was discovered that the Ubuntu-specific SetLanguage patch to
AccountsService incorrectly handled dropping privileges. A local attacker
could use this issue to execute arbitrary commands as an administrator.
(CVE-2026-61897)

It was discovered that the Ubuntu-specific SetLanguage helpers for
AccountsService incorrectly handled parsing configuration files. A local
attacker could use this issue to execute arbitrary commands.
(CVE-2026-61898)

[messages.read_original_source] →