Skip to content

[Deepin Integration]~[v25-Release] fix: Fix CVE-2026-96512 by wxphaha@deepin-community/sudo by deepin-community-ci-bot[bot] #14068

Description

@deepin-bot

Package information | 软件包信息

包名 版本
sudo 1.9.16p2-3deepin3

Package repository address | 软件包仓库地址

deb [trusted=yes] https://ci.deepin.com/repo/obs/deepin:/CI:/TestingIntegration:/test-integration-pr-4609/testing/ ./

Changelog | 更新信息

sudo (1.9.16p2-3deepin3) unstable; urgency=medium

  • Fix CVE-2026-96512: ignore the user-specified TZ environment variable
    when evaluating sudoers NOTBEFORE/NOTAFTER timestamps. Backport upstream
    commits db669167 and 1820a34 (time-window bypass via mktime, ~25h shift).

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

Labels

Type

No type

Projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions