$sudo apt-get upgrade and get a list of things that need upgrading with a "Y\n" confirmation.
before you can read the list, and type "Y" or "n", the phone rings, or your boss comes in, or you do some thing else. You come back an hour later, and hit Y to install updates.
you are not prompted again for a password. presumably, any more sudo commands in the shell will execute, because the timer has been on hold waiting for the user input. Or a user can kill the update process and do something like
sudo -i and simply stay in root indefinitely.
I am using ubuntu mate 14.04
is this a noteworthy security exception? Should I try to report it some place? If so, where?