CLSA-2026-1791570106

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791570106.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1791570106
Upstream
Published
2026-10-09T18:21:58Z
Modified
2026-10-26T09:31:53Z
Summary
Fix CVE(s): CVE-2026-96512
Details
  • SECURITY UPDATE: time-based sudoers restrictions bypass via user-controlled TZ
    • debian/patches/CVE-2026-96512.patch: remove the user-specified TZ from sudo's environment so NOTBEFORE/NOTAFTER use the system time zone
    • CVE-2026-96512
References

Affected packages

TuxCare:Debian:10 / sudo

Package

Name
sudo
Purl
pkg:deb/tuxcare/sudo?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.27-1+deb10u6+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791570106.json"

TuxCare:Debian:10 / sudo-ldap

Package

Name
sudo-ldap
Purl
pkg:deb/tuxcare/sudo-ldap?distro=debian-10

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
1.8.27-1+deb10u6+tuxcare.els3

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_os/debian10els/CLSA-2026-1791570106.json"