The Ubuntu 25.10 transition to using some Rust system utilities continues proving quite rocky. Beyond some early performance issues with Rust Coreutils, breakage for some executables, and broken unattended upgrades due to a Rust Coreutils bug, it’s also sudo-rs now causing Ubuntu developers some headaches. There are two moderate security issues affecting sudo-rs, the Rust version of sudo being used by Ubuntu 25.10.

  • entwine@programming.dev
    link
    fedilink
    arrow-up
    45
    arrow-down
    3
    ·
    23 hours ago

    Everyone knows that memory safety isn’t the only source of security vulnerabilities (unless you’re bickering about programming languages on the internet, in which case 100% of security vulnerabilities are related to memory safety)

    Rust users are one of Rust’s biggest weaknesses.

    • eah@programming.dev
      link
      fedilink
      arrow-up
      3
      ·
      7 hours ago

      memory safety isn’t the only source of security vulnerabilities

      I would like you to produce an example of a Rust evangelist disputing this. They’re not as dimwitted or misguided as you seem to think.