> Debian trixie inetutils Critical Telnetd Authentication Bypass DSA-6144-1
[DATE: 19/02/2026 20:41]
[LANGUAGE: EN]
Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been fixed in