This bug was fixed in the package rust-sudo-rs - 0.2.14-1ubuntu4.1
---------------
rust-sudo-rs (0.2.14-1ubuntu4.1) stonking-security; urgency=medium
* SECURITY UPDATE: Privilege Escalation via sudoedit (LP: #2165142)
- debian/patches/fix-sudoedit.patch: Prevent unauthorized sudoedits Fix an
issue where users with limited sudoedit rights could exploit a race
condition to get escalated sudoedit permissions. in src/common/context.rs.
- No CVE number
-- Marc Deslauriers <[email protected]> Tue, 20 Oct 2026
07:26:12 -0400
** Changed in: rust-sudo-rs (Ubuntu)
Status: New => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2165142
Title:
Time-of-check vs time-of-use issue in sudoedit allows local privilege
escalation
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-sudo-rs/+bug/2165142/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
