PT-2026-63318 · Canonical · Accountsservice

CVE-2026-61897 · Publicado 2026-07-21 · Atualizado 2026-07-21

OSV

USN-8580-1 fixed vulnerabilities in AccountsService. This update provides the corresponding fixes for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.

Original advisory details:

It was discovered that the Ubuntu-specific SetLanguage patch to AccountsService incorrectly handled dropping privileges. A local attacker could use this issue to execute arbitrary commands as an administrator. (CVE-2026-61897)

It was discovered that the Ubuntu-specific SetLanguage helpers for AccountsService incorrectly handled parsing configuration files. A local attacker could use this issue to execute arbitrary commands. (CVE-2026-61898)

Identificadores relacionados

CVE-2026-61897

USN-8580-1

USN-8580-2

Produtos afetados

Accountsservice

Referências · 8

• https://osv.dev/vulnerability/USN-8580-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-61898 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-8580-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-8580-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-8580-2 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2026-61897 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2026-61897 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-61897 · Aviso do Fabricante