Threats tagged 'ghsa-jj2h-hcrf-9gfx'

A high-severity vulnerability (CVE-2026-96512) was discovered in the sudo utility affecting versions prior to 1.9.17-16.p2.2.hum1. The flaw involves time-based access restrictions using NOTBEFORE or NOTAFTER rules when timestamps omit the trailing 'Z', allowing an attacker to bypass these restrictions by manipulating the TZ environment variable. Official security updates have been released by SUSE and Red Hat to address this issue. No known exploits have been reported in the wild.