News for hackers. Stuff that matters.

A comment on Format string vulnerability found in 'sudo'. Parent comment

Re:Format string vulnerability found in 'sudo' by mcclung on Monday January 30, 2012 @06:04PM (#3530997)
Super. My gentoo boxes are 1.8.2, and are broken as expected.

  $ ln -s /usr/bin/sudo ./%s
  $ ./%s -D9
  [some debug output with garbage]
  Segmentation fault
  $
Bug is here:

https://bugs.gentoo.org/show_bug.cgi?id=401533

Looks like it's patched on x86/amd64 already.

OpenIndiana looks unaffected. It's using 1.7.4p4.

[ Parent | on HN ]
Re:Format string vulnerability found in 'sudo' by vangale on Monday January 30, 2012 @07:32PM (#3531221)
Yep patch is in Gentoo, I just did a sync and 1.8.3_p2 will be built.
[ Parent | on HN ]