Linux

10136 readers

758 users here now

A community for everything relating to the GNU/Linux operating system (except the memes!)

Also, check out:

Original icon base courtesy of lewing@isc.tamu.edu and The GIMP

founded 2 years ago

MODERATORS

Ategon@programming.dev

anzo@programming.dev

dwraf_of_ignorance@programming.dev

166

sudo-rs Affected By Multiple Security Vulnerabilities - Impacting Ubuntu 25.10 (www.phoronix.com)

submitted 5 days ago by cm0002@literature.cafe to c/linux@programming.dev

58 comments fedilink hide all child comments

The Ubuntu 25.10 transition to using some Rust system utilities continues proving quite rocky. Beyond some early performance issues with Rust Coreutils, breakage for some executables, and broken unattended upgrades due to a Rust Coreutils bug, it's also sudo-rs now causing Ubuntu developers some headaches. There are two moderate security issues affecting sudo-rs, the Rust version of sudo being used by Ubuntu 25.10.

you are viewing a single comment's thread
view the rest of the comments

[–] vrighter@discuss.tchncs.de 4 points 4 days ago (1 children)

but they rewrowe it in rust for safety!

[–] MadhuGururajan@programming.dev 2 points 3 days ago

yo the people railing against this must consider themselves geniuses. It's like people have a hateboner for rust.

Have you considered maybe that this was expected regardless of what language you do it in? It's a rewrite and that's definitely going to miss several decades of changes that have made the normal version good.

You have to measure the time it takes for the rust version to get to the same level as the non-rust counterpart.

Consider also you actually can't switch off your brain because of memory guarantees. You have to work on other important things too.

Also keep a count of CVEs that the rust version generated and decide if the current port is better or a failure.