Skip to content
OpenAdvisories
Medium DSA-6052-1 2 CVEs

rust-sudo-rs - security update

Published Nov 11, 2025 · Updated Nov 11, 2025

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 13 rust-sudo-rs 0.2.5-5+deb13u1

Vulnerabilities 2

  • Medium 4.4
    CVE-2025-64517

    sudo-rs doesn't record authenticating user properly in timestamp

    sudo-rs is a memory safe implementation of sudo and su written in Rust. With `Defaults targetpw` (or `Defaults rootpw`) enabled, the password of the target account (or root account) instead of the invoking user is used for authentication. sudo-rs starting in …

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io
  • Low 3.8
    CVE-2025-64170

    sudo-rs: Partial password reveal is possible after timeout

    sudo-rs is a memory safe implementation of sudo and su written in Rust. Starting in version 0.2.7 and prior to version 0.2.10, if a user begins entering a password but does not press return for an extended period, a password timeout may occur. When this happe…

    trifectatechfoundation sudo-rs sudo-rs rust-sudo-rs Debian Ubuntu crates.io