[HN Gopher] Multiple Security Issues in Rust-sudo-rs
___________________________________________________________________
Multiple Security Issues in Rust-sudo-rs
Author : eyberg
Score : 20 points
Date : 2025-11-11 21:07 UTC (1 hours ago)
(HTM) web link (bugs.launchpad.net)
(TXT) w3m dump (bugs.launchpad.net)
| j0057 wrote:
| > A partially typed password would be output to standard input if
| a timeout occurred when Defaults pwfeedback was not enabled
| (GHSA-q428-6v73-fc4q).
|
| > Timestamp files did not take into account the setting of the
| Defaults targetpw and Defaults rootpw (GHSA-c978-wq47-pvvw)
| JoshTriplett wrote:
| "moderate" makes sense here; those are issues that needed
| fixing, but they wouldn't give someone privileged access they
| shouldn't have, and they occur in non-default configurations.
___________________________________________________________________
(page generated 2025-11-11 23:01 UTC)