We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
1 parent 34fc344 commit 7225174Copy full SHA for 7225174
crates/users/RUSTSEC-0000-0000.md
@@ -11,10 +11,15 @@ patched = []
11
unaffected = ["<= 0.7.0"]
12
```
13
14
-# `root` appended to supplementary groups
+# `root` unconditionally appended to group listings
15
16
-Affected versions append the `root` group to the supplementary groups of a user, regardless of their actual membership.
17
-This occurs unless the user is a member of exactly 1024 supplementary groups.
+Affected versions append `root` to all group listings.
+This occurs unless the correct listing has exactly 1024 groups.
18
+
19
+This affects both:
20
21
+- The supplementary groups of a user
22
+- The groups of the current process
23
24
If the caller uses this information for access control, this may lead to privilege escalation.
25
0 commit comments