> A partially typed password would be output to standard input if a timeout
occurred when Defaults pwfeedback was not enabled (GHSA-q428-6v73-fc4q).
> Timestamp files did not take into account the setting of the
Defaults targetpw and Defaults rootpw (GHSA-c978-wq47-pvvw)
JoshTriplett•1h ago
"moderate" makes sense here; those are issues that needed fixing, but they wouldn't give someone privileged access they shouldn't have, and they occur in non-default configurations.
j0057•1h ago
> Timestamp files did not take into account the setting of the Defaults targetpw and Defaults rootpw (GHSA-c978-wq47-pvvw)
JoshTriplett•1h ago