USN-8895-1: Sudo flaw lets local users bypass time restrictions through the TZ variable

Notice USN-8895-1, published on October 7, 2026 in the Ubuntu Security feed, describes a vulnerability in Sudo. According to the text received, Sudo did not correctly handle time-based access restrictions when sudoers rules used the NOTBEFORE or NOTAFTER directives with timestamps lacking a timezone indicator at the end. A local attacker could possibly exploit this to run commands outside the intended time window by manipulating the TZ environment variable. The excerpt available does not list affected versions or the fixed version; those details should be checked in the original notice. For readers, the relevance lies in combining time-based sudoers rules with local access: a time restriction that seems guaranteed may not hold if the environment allows TZ to be changed. The responsible approach is to check whether the organization uses Sudo with these directives, apply the vendor package update, and record the verification. Rota Nacional does not patch operating system packages or replace server updates.