Skip to content

Commit 7225174

Browse files
authored
Also mention process groups in users report
1 parent 34fc344 commit 7225174

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

crates/users/RUSTSEC-0000-0000.md

+8-3
Original file line numberDiff line numberDiff line change
@@ -11,10 +11,15 @@ patched = []
1111
unaffected = ["<= 0.7.0"]
1212
```
1313

14-
# `root` appended to supplementary groups
14+
# `root` unconditionally appended to group listings
1515

16-
Affected versions append the `root` group to the supplementary groups of a user, regardless of their actual membership.
17-
This occurs unless the user is a member of exactly 1024 supplementary groups.
16+
Affected versions append `root` to all group listings.
17+
This occurs unless the correct listing has exactly 1024 groups.
18+
19+
This affects both:
20+
21+
- The supplementary groups of a user
22+
- The groups of the current process
1823

1924
If the caller uses this information for access control, this may lead to privilege escalation.
2025

0 commit comments

Comments
 (0)