Back Linuxsecurity

Fedora 42 sudo-rs Important Auth Bypass CVE-2025-64517 2025

Linuxsecurity •LinuxSecurity Advisories • November 26, 2025

A memory safe implementation of sudo and su. Update Information : Update to version 0.2.10. This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

A memory safe implementation of sudo and su.

Update to version 0.2.10. This release includes fixes for CVE-2025-64170 and CVE-2025-64517.

* Mon Nov 17 2025 Fabio Valentini - 0.2.10-1 - Update to version 0.2.10; Fixes RHBZ#2413768

[ 1 ] Bug #2414749 - CVE-2025-64170 sudo-rs: sudo-rs: Partial password reveal is possible after timeout [fedora-42] [ 2 ] Bug #2414777 - CVE-2025-64517 sudo-rs: Authentication bypass in timestamp [fedora-42]

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2025-4388808bbf' at the command line. For more information, refer to the dnf documentation available at

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Fedora 41 and 42 Address sudo-rs Vulnerabilities CVE-2025-64170 and CVE-2025-64517 Fedora has released updates for sudo-rs to address critical vulnerabilities CVE-2025-64170 and CVE-2025-64517. Affected users are advised to update to version 0.2.10, which includes memory-safe implementations of sudo and su. The updates were made available on November 17, 2025. 2 sources 24

Extracted Entities

CVEs (2)

CVE-2025-64170 CVE-2025-64517

Platforms (1)

Fedora 42