you are viewing a single comment's thread
view the rest of the comments
[–] 10 points 1 year ago (3 children)

As far as mitigation is concerned, the only thing you need to do is to confirm that your system's sudo version is at least version 1.9.17p1 or later, which can be done with the command sudo -V. If your version is older than 1.9.17p1, update immediately.

  • source
  • hideshow 3 child comments
  • [–] 6 points 1 year ago* (last edited 1 year ago) (2 children)

    This wouldn't apply to Debian derived distros (e.g. DietPi). I am assuming the fix will backported to the version of sudo shipping with bookworm.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 0 points 1 year ago (1 child)

    Why wouldn't this apply?

    One day in the future the later version of sudo would become available...?

  • source
  • parent
  • hideshow 1 child comment
  • [–] 5 points 1 year ago*

    I am assuming the fix for the second vulnerability will be backported to the older version in bookworn; 13p1 if I remember correctly.

    I've seen theme backport security to older releases of much less important software.

  • source
  • parent