5 ms·
Affected versions are 1.8.0 through 1.8.3p1 inclusive. Ubuntu 11.10 is not affected (it's running 1.7.4). Ubuntu 12.04 (alpha) might be, which appears to be run
by morsch 15y ago
Affected versions are 1.8.0 through 1.8.3p1 inclusive. Ubuntu 11.10 is not affected (it's running 1.7.4). Ubuntu 12.04 (alpha) might be, which appears to be running 1.8.3p1, for a short while anyway.
- dpritchett 15y agoUbuntu 10.04 LTS seems to be OK: $ lsb_release -a No LSB modules are available. Distributor ID: Ubuntu Description: Ubuntu 10.04.3 LTS Release: 10.04 Codename: lucid $ sudo -V Sudo version 1.7.2p1
- sho_hn 15y agoDebian stable is unaffected (1.7.4p4).
- legooolas 15y agoDebian _un_stable, on the other hand may be (depending on when you last updated). There is a new package available and so an `apt-get install sudo' or `apt-get upgrade' will sort it.
- waitwhat 15y agoCentOS 6.2 (and hence RHEL 6.2, the current version) is on sudo-1.7.4p5.
- rwmj 15y agoRHEL compiled out the debugging support and is NOT vulnerable. Fedora compiles everything with -DFORTIFY_SOURCE which means this still crashes, but is not (thought to be) vulnerable. In any case there is an update available for Fedora right now. https://admin.fedoraproject.org/updates/sudo-1.8.3p1-2.fc16 https://admin.fedoraproject.org/updates/sudo-1.8.3p1-2.fc16
- mcclung 15y agoSuper. My gentoo boxes are 1.8.2, and are broken as expected. $ ln -s /usr/bin/sudo ./%s $ ./%s -D9 [some debug output with garbage] Segmentation fault $ Bug is here: https://bugs.gentoo.org/show_bug.cgi?id=401533 https://bugs.gentoo.org/show_bug.cgi?id=401533 Looks like it's patched on x86/amd64 already. OpenIndiana looks unaffected. It's using 1.7.4p4.
- vangale 15y agoYep patch is in Gentoo, I just did a sync and 1.8.3_p2 will be built.
- andrewcooke 15y agosegfaults on opensuse 12.1 (1.8.2).
- gurkendoktor 15y agoOn OS X 10.7.2: Sudo version 1.7.4p6, on the latest 10.6: 1.7.0.