UbuntuUpdates.org

Package "sed"

Name: sed

Description:

GNU stream editor for filtering/transforming text
Latest version: 4.9-2ubuntu0.24.04.1
Release: noble (24.04)
Level: updates
Repository: main
Homepage: https://www.gnu.org/software/sed/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "sed"

32-bit deb package
64-bit deb package
APT INSTALL

Other versions of "sed" in Noble

Repository Area Version
base main 4.9-2build1
security main 4.9-2ubuntu0.24.04.1

Changelog

Version: 4.9-2ubuntu0.24.04.1 2026-05-04 15:35:41 UTC

  sed (4.9-2ubuntu0.24.04.1) noble-security; urgency=medium

  * SECURITY UPDATE: TOCTOU race in sed -i --follow-symlinks
    - debian/patches/CVE-2026-5958.patch: open the already-resolved path
      instead of re-traversing the symlink in sed/execute.c.
    - CVE-2026-5958

 -- Marc Deslauriers <email address hidden> Fri, 17 Apr 2026 14:02:14 -0400
CVE-2026-5958 When sed is invoked with both -i (in-place edit) and --follow-symlinks, the function open_next_file() performs two separate, non-atomic filesystem op


About   -   Send Feedback to @ubuntu_updates