Summary
It was discovered that Sudo incorrectly checked return codes when dropping
privileges to run the mailer. A local attacker could possibly use this
issue to escalate privileges.
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | sudo | 1.9.9-1ubuntu2.6 |
| Ubuntu · 24.04 LTS 24.04:LTS | sudo | 1.9.15p5-3ubuntu5.24.04.2 |
| Ubuntu · 25.10 | sudo | 1.9.17p2-1ubuntu1.1 |
References
-
report
https://launchpad.net/bugs/2143042