Urgent Security Update | Fix sudo time-window authorization bypass

Urgent Security Update | Fix sudo time-window authorization bypass

Dear deepin users and community partners: Recently, we detected a time-window authorization bypass vulnerability in sudo. Under certain conditions, an attacker can cause expired or not-yet-effective sudo authorization rules to be incorrectly judged as valid, thereby obtaining root privileges outside the intended time period. At present, the technical details for exploiting this vulnerability have been made public. Given its severity and broad impact, to ensure the security of your system, we recommend that all users upgrade as soon as possible. Vulnerability Information Vulnerability ID:  CVE-2026-96512 Vulnerability Description: This vulnerability originates from a flaw (CWE-863) in sudo’s authorization validation of time-based ...Read more