3 ms·
The old code (see patch: https://gist.github.com/AGWA/4069e45856ed261ac0af https://gist.github.com/AGWA/4069e45856ed261ac0af) was using sprintf and strcat on a
by jimrandomh 12y ago
The old code (see patch: https://gist.github.com/AGWA/4069e45856ed261ac0af https://gist.github.com/AGWA/4069e45856ed261ac0af) was using sprintf and strcat on a fixed size buffer, which are huge red flags of a type which security-bug-hunting analysis tools know about. The fact that a bug like that was still there means that people are just recently taking a close look at apt, and there are probably more findings to come.