[Bug 2130623] Re: Update to address two moderate vulnerabilities

[Marc Deslauriers]

** Changed in: rust-sudo-rs (Ubuntu)
       Status: New => Fix Released

** Changed in: rust-sudo-rs (Ubuntu Plucky)
       Status: New => Confirmed

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rust-sudo-rs in Ubuntu.
https://bugs.launchpad.net/bugs/2130623

Title:
  Update to address two moderate vulnerabilities

Status in rust-sudo-rs package in Ubuntu:
  Fix Released
Status in rust-sudo-rs source package in Plucky:
  Confirmed
Status in rust-sudo-rs source package in Questing:
  Fix Released

Bug description:
  PPA with fix: https://launchpad.net/~bamf0/+archive/ubuntu/rust-sudo-rs-lp2130623/+packages
  Repository with fix: https://code.launchpad.net/~bamf0/ubuntu/+source/cve-fixes/+git/cve-fixes/+ref/sudo-rs-sru-lp2130623-questing
  ---
  Upstream will release a fix for two moderate vulnerabilities targeting Friday (Nov 7 2025).

  The expected coordinated release of this fix is Monday (Nov 10 2025).

  One of these vulnerabilities is CVE-2025-64170.

  Course of action:
  - The change suggested by upstream is to update the package (SRU)
  - There are not any changes in dependencies with respect to version 0.2.8

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-sudo-rs/+bug/2130623/+subscriptions