> USN-8895-2: Sudo vulnerability
[DATE: 12/11/2026 20:06]
[LANGUAGE: EN]
USN-8895-1 fixed a vulnerability in Sudo. This update provides the
corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that Sudo did not properly handle time-based access
restrictions when sudoers rules used NOTBEFORE or NOTAFTER with
timestamps omitting the trailing timezone indicator. A local attacker
could possibly use this issue to execute commands outside the intended
time window by manipulating the TZ environment variable.