Public
- Public
- Network
- Groups
- Featured
- Popular
- People

Conversation

Notices

Embed this notice
Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:11:58 JST Haelwenn /элвэн/ :triskell:

Pfft CVE-2025-32462 really is a sudo moment

In conversation about a year ago from queer.hacktivis.me permalink
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:14:07 JST Haelwenn /элвэн/ :triskell:
  in reply to
  
  Details at https://www.sudo.ws/security/advisories/host_any/
  In conversation about a year ago permalink
  Attachments
  1. Domain not in remote thumbnail source whitelist: www.sudo.ws
    
    Local Privilege Escalation via host option
    
    Sudo’s host (-h or --host) option is intended to be used in conjunction with the list option (-l or --list) to list a user’s sudo privileges on a host other than the current one. However, due to a bug it was not restricted to listing privileges and could be used when running a command via sudo or editing a file with sudoedit. Depending on the rules present in the sudoers file this could allow a local privilege escalation attack.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:17:51 JST Haelwenn /элвэн/ :triskell:
  in reply to
  
  Anyway, reminder that doas is a thing.
  Does much less but it also means it's auditable.
  
  In conversation about a year ago permalink
- Embed this notice
  achill (fossdd@chaos.social)'s status on Tuesday, 01-Jul-2025 01:26:37 JST achill
  in reply to
  
  @lanodan yeah it was a good thing that postmarketos switched to doas and alpine moved sudo to community
  
  In conversation about a year ago permalink
  
  Haelwenn /элвэн/ :triskell: likes this.
- Embed this notice
  Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Tuesday, 01-Jul-2025 01:27:03 JST Haelwenn /элвэн/ :triskell:
  in reply to
  - achill
  @fossdd Yeah although it seems rather expected to me that Alpine would pick a lighter and more security-focused design.
  
  In conversation about a year ago permalink

Public

Conversation

Notices

Feeds