From mboxrd@z Thu Jan 1 00:00:00 1970 Return-path: From: Roland Hieber Date: Wed, 27 Jan 2021 01:04:27 +0100 Message-Id: <20210127000427.19719-1-rhi@pengutronix.de> MIME-Version: 1.0 Subject: [ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2 List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Errors-To: ptxdist-bounces@pengutronix.de Sender: "ptxdist" To: ptxdist@pengutronix.de Cc: Roland Hieber Update license MD5 sum, only the copyright date was bumped to 2021. Highlights from the changelog [1]: * Fixed CVE-2021-23239, a potential information leak in sudoedit that could be used to test for the existence of directories not normally accessible to the user in certain circumstances. * Fixed CVE-2021-23240, a flaw in the temporary file handling of sudoedit's SELinux RBAC support. * Fixed a potential buffer overflow when unescaping backslashes in the command's arguments (CVE-2021-3156 "Baron Samedit") [1]: https://www.sudo.ws/stable.html#1.9.5p2 Signed-off-by: Roland Hieber --- rules/sudo.make | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/rules/sudo.make b/rules/sudo.make index efd420674bbd..a10969da5b29 100644 --- a/rules/sudo.make +++ b/rules/sudo.make @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo # # Paths and names # -SUDO_VERSION := 1.9.3 -SUDO_MD5 := ecf74b49275f15a3e46f1903c6cb2211 +SUDO_VERSION := 1.9.5p2 +SUDO_MD5 := e6bc4c18c06346e6b3431637a2b5f3d5 SUDO := sudo-$(SUDO_VERSION) SUDO_SUFFIX := tar.gz SUDO_URL := \ @@ -25,7 +25,7 @@ SUDO_URL := \ SUDO_SOURCE := $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX) SUDO_DIR := $(BUILDDIR)/$(SUDO) SUDO_LICENSE := ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib -SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02 +SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173 # ---------------------------------------------------------------------------- # Prepare @@ -77,8 +77,11 @@ SUDO_AUTOCONF = \ --disable-package-build \ --disable-gss-krb5-ccache-name \ --disable-pvs-studio \ + --disable-log-server \ + --enable-log-client \ --disable-sia \ $(GLOBAL_LARGE_FILE_OPTION) \ + --disable-python \ --disable-pam-session \ --disable-kerb5-instance \ --without-AFS \ -- 2.30.0 _______________________________________________ ptxdist mailing list ptxdist@pengutronix.de To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de