USN-8895-2: Sudo vulnerability
USN-8895-1 fixed a vulnerability in Sudo. This update provides the corresponding updates for Ubuntu 18.04 LTS and Ubuntu 20.04 LTS. Original advisory details: It was discovered that Sudo did not properly handle time-based access restrictions when sudoers rules used NOTBEFORE or NOTAFTER with timestamps omitting the trailing timezone indicator. A local attacker could possibly use this issue to execute commands outside the intended time window by manipulating the TZ environment variable.
Continue on Ubuntu Security Notices ↗ ‹ All news Get the newsletter
The summary and image come from Ubuntu Security Notices; the image is shown from their website.