How to get root on Ubuntu 20.04 by pretending nobody’s /home

Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by gspr on Wednesday November 11, 2020 @03:30AM (#25056562)

> Well, as one of those upstream authors whose code was patched: I was never contacted about it, so I never knew there was a requirement to be met, and so they carried around a bad patch for years, about which I knew nothing.

In my experience it's rather uncommon for a DD not to contact upstream. Would you mind sharing the package name and vulnerability so I and others can learn what happened?

[ Parent | on HN ]

Re:How to get root on Ubuntu 20.04 by pretending nobody’s /home by ldarby on Thursday November 12, 2020 @03:07AM (#25067602)

If we're still talking about the Debian SSH key bug in 2008, here is the Debian bug (from 2006) that led to the security issue, which was discovered in 2008: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=363516.

Upstream was contacted about it: https://marc.info/?t=114651088900003&r=1&w=2

[ Parent | on HN ]