Todd Miller has just released sudo-1.6.3-pl6 (wolverine contains pl5),
which he says fixes a buffer overflow. No known exploits are known, but
it's still obviously a problem.
Security updates for 7.0, etc., will also be necessary.
This defect is considered MUST-FIX for Florence Release-Candidate #2
Fixed in the current version; currently building errata packages for 7.0,
powertools-6.x and powertools-5.x
Umm, shouldn't the resolution for these be ERRATA not RAWHIDE?