3 ms·
This page has critical misinformation which has already caused confusion on this thread. Version number alone cannot tell you if you are vulnerable or patched!
by invokestatic 6y ago
This page has critical misinformation which has already caused confusion on this thread.
Version number alone cannot tell you if you are vulnerable or patched! Many, many Linux distributions, including (at least) Ubuntu and RHEL "backport" security fixes to older versions of the software. That means you could be using an old version of sudo, but still fully patched and protected from this exploit.
Edit: furthermore, the patching instructions for WSL is completely wrong and should not be followed. The correct procedure is to just get the update from your distro:
sudo apt-get update && sudo apt-get --only-upgrade install sudo
- mcrump 6y agoVery good point and I've updated the README.md. I had a typo when I originally ran it and that is why I thought you had to update it manually. Thanks community for helping me.
- deleted 6y ago[deleted]