Re: [ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2

[Roland Hieber <rhi@pengutronix.de>]

On Wed, Jan 27, 2021 at 01:04:27AM +0100, Roland Hieber wrote:
> Update license MD5 sum, only the copyright date was bumped to 2021.
> 
> Highlights from the changelog [1]:
> 
> * Fixed CVE-2021-23239, a potential information leak in sudoedit that
>   could be used to test for the existence of directories not normally
>   accessible to the user in certain circumstances.
> 
> * Fixed CVE-2021-23240, a flaw in the temporary file handling of
>   sudoedit's SELinux RBAC support.
> 
> * Fixed a potential buffer overflow when unescaping backslashes in the
>   command's arguments (CVE-2021-3156 "Baron Samedit")
> 
> [1]: https://www.sudo.ws/stable.html#1.9.5p2
> 
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> ---
>  rules/sudo.make | 9 ++++++---
>  1 file changed, 6 insertions(+), 3 deletions(-)
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index efd420674bbd..a10969da5b29 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.3
> -SUDO_MD5	:= ecf74b49275f15a3e46f1903c6cb2211
> +SUDO_VERSION	:= 1.9.5p2
> +SUDO_MD5	:= e6bc4c18c06346e6b3431637a2b5f3d5
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> @@ -25,7 +25,7 @@ SUDO_URL	:= \
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> -SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02
> +SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173
>  
>  # ----------------------------------------------------------------------------
>  # Prepare
> @@ -77,8 +77,11 @@ SUDO_AUTOCONF = \
>  	--disable-package-build \
>  	--disable-gss-krb5-ccache-name \
>  	--disable-pvs-studio \
> +	--disable-log-server \
> +	--enable-log-client \

Side note: I wanted to disable this option, but then it didn't build
because of unresolved references to audit_to_eventlog in
plugins/sudoers/audit.c line 404 – however, I could not reproduce this
when building on the host, where it built just fine, and I don't
understand how… :-/

[1]: https://github.com/sudo-project/sudo/blob/master/plugins/sudoers/audit.c#L404

 - Roland

>  	--disable-sia \
>  	$(GLOBAL_LARGE_FILE_OPTION) \
> +	--disable-python \
>  	--disable-pam-session \
>  	--disable-kerb5-instance \
>  	--without-AFS \
> -- 
> 2.30.0
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
> 

-- 
Roland Hieber, Pengutronix e.K.          | r.hieber@pengutronix.de     |
Steuerwalder Str. 21                     | https://www.pengutronix.de/ |
31137 Hildesheim, Germany                | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686         | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de