[Bug 2142460] Re: Apt update asking sudo password in asteriks can make guessing password length easy

[lotuspsychje]

*** This bug is a duplicate of bug 2142721 ***
    https://bugs.launchpad.net/bugs/2142721

** This bug has been marked a duplicate of bug 2142721
   sudo-rs echos * for every character typed breaking historical security measures older than I am

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to apt in Ubuntu.
https://bugs.launchpad.net/bugs/2142460

Title:
  Apt update asking sudo password in asteriks can make guessing password
  length easy

Status in apt package in Ubuntu:
  Invalid
Status in rust-sudo-rs package in Ubuntu:
  Won't Fix

Bug description:
  Ubuntu desktop 26.04 development branch @ 23/2/2026

  The new apt feature asking the sudo password in asteriks *******

  can make other users potentialy guess the password length

  wich make it easier guessing the real password

  ProblemType: Bug
  DistroRelease: Ubuntu 26.04
  Package: apt 3.1.16
  ProcVersionSignature: Ubuntu 6.19.0-6.6-generic 6.19.2
  Uname: Linux 6.19.0-6-generic x86_64
  ApportVersion: 2.33.1-0ubuntu3
  Architecture: amd64
  CasperMD5CheckResult: pass
  CurrentDesktop: ubuntu:GNOME
  Date: Mon Feb 23 12:03:00 2026
  InstallationDate: Installed on 2025-10-21 (125 days ago)
  InstallationMedia: Ubuntu 25.10 "Questing Quokka" - Release amd64 (20251007)
  ProcEnviron:
   LANG=nl_NL.UTF-8
   PATH=(custom, no user)
   SHELL=/bin/bash
   TERM=xterm-256color
   XDG_RUNTIME_DIR=<set>
  SourcePackage: apt
  UpgradeStatus: Upgraded to resolute on 2025-10-21 (125 days ago)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/apt/+bug/2142460/+subscriptions