[CLSA-2026:1791570106] Fix CVE(s): CVE-2026-96512
Type:
security
Severity:
Important
Release date:
2026-10-09 18:21:58 UTC
Description:
* SECURITY UPDATE: time-based sudoers restrictions bypass via user-controlled TZ - debian/patches/CVE-2026-96512.patch: remove the user-specified TZ from sudo's environment so NOTBEFORE/NOTAFTER use the system time zone - CVE-2026-96512
CVEs fixed:
Updated packages:
  • sudo_1.8.27-1+deb10u6+tuxcare.els3_amd64.deb
    sha:00b7ac24b2d65a3bbefdcd1c1f01441584a95ad4
  • sudo-ldap_1.8.27-1+deb10u6+tuxcare.els3_amd64.deb
    sha:83a2ba92d4850d96daa22bdddeef8c77e56552c1
  • sudo_1.8.27-1+deb10u6+tuxcare.els3_arm64.deb
    sha:fd365f7bfe7e8093b0ba9e30e5b1fec7ada18848
  • sudo-ldap_1.8.27-1+deb10u6+tuxcare.els3_arm64.deb
    sha:373342ad846890c4583ef171f599dbdff6566a9a
  • sudo_1.8.27-1+deb10u6+tuxcare.els3_armel.deb
    sha:3abb02dfb9dfe53ca91897ef90af34b9ffa1d816
  • sudo-ldap_1.8.27-1+deb10u6+tuxcare.els3_armel.deb
    sha:cfaae125ca503fbaf4195a7ad5e794378d943e60
Notes:
This page is generated automatically and has not been checked for errors. For clarification or corrections please contact the CloudLinux Packaging Team.