USN-8950-1: poppler vulnerability
USN-8950-1
Summary
USN-8708-1 fixed a vulnerability in sudo-rs. This update provides the corresponding fix for Ubuntu 26.10.
Original advisory details:
It was discovered that sudo-rs incorrectly handled time-of-check vs time- of-use conditions in sudoedit. A local attacker with permission to edit specific files using sudoedit could use this issue to place files in arbitrary directories, and possibly escalate their privileges. This issue only affected systems configured to grant fine-grained sudoedit file editing permissions, which is not the default configuration.
Products covered
A separate affected-products list was not included in the collected bulletin.
Remediation
USN-8708-1 fixed a vulnerability in sudo-rs.
CVEs in this advisory 0
No CVE identifiers were listed in the collected bulletin.
Updates
- Published by Ubuntu
The publication date reported by the vendor.
- Added to SecurityAlert
We collected the advisory from the official source.
- Confirmed at the source
Our collector saw this advisory during a later source check.