https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-28T11:14:11.287840+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2014-9680 CVE-2014-9680 2026-09-28T11:14:11.522824+00:00

sudo before 1.8.12 does not ensure that the TZ environment variable is associated with a zoneinfo file, which allows local users to open arbitrary files for read access (but not view file contents) by running a program within an sudo session, as demonstrated by interfering with terminal output, discarding kernel-log messages, or repositioning tape drives.

 https://vulnerability.circl.lu/vuln/usn-2533-1 USN-2533-1 — sudo vulnerability 2026-09-28T11:14:11.522923+00:00

Affected: Ubuntu:14.04:LTS: sudo

Jakub Wilk and Stephane Chazelas discovered that Sudo incorrectly handled the TZ environment variable. An attacker with Sudo access could possibly use this issue to open arbitrary files, bypassing intended permissions.