[ptxdist] [PATCH v2] sudo: version bump 1.9.15p5 -> 1.9.17p1

[ptxdist] [PATCH v2] sudo: version bump 1.9.15p5 -> 1.9.17p1

[Bruno Thomsen]

Sudo insults are now included by default, but disabled unless
the --with-insults configure option is specified or the insults
sudoers option is enabled.

Fixes CVE-2025-32462 and CVE-2025-32463.

Copyright year update in license file.

Changelog: https://www.sudo.ws/releases/stable/#1.9.17p1

Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
---
v1-v2:
License file contain update to years.

 rules/sudo.make | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

diff --git a/rules/sudo.make b/rules/sudo.make
index 83c3e7f8e..94234a3f4 100644
--- a/rules/sudo.make
+++ b/rules/sudo.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
 #
 # Paths and names
 #
-SUDO_VERSION	:= 1.9.15p5
-SUDO_MD5	:= 4166279cb188ecb6641c7a2ba5f68270
+SUDO_VERSION	:= 1.9.17p1
+SUDO_MD5	:= 231106344ffe541fa8e0bd4caf322497
 SUDO		:= sudo-$(SUDO_VERSION)
 SUDO_SUFFIX	:= tar.gz
 SUDO_URL	:= \
@@ -25,7 +25,7 @@ SUDO_URL	:= \
 SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
 SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
 SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
-SUDO_LICENSE_FILES := file://LICENSE.md;md5=5100e20d35f9015f9eef6bdb27ba194f
+SUDO_LICENSE_FILES := file://LICENSE.md;md5=2841c822e587db145364ca95e9be2ffa
 
 # ----------------------------------------------------------------------------
 # Prepare
@@ -73,7 +73,6 @@ SUDO_CONF_OPT	:= \
 	--disable-tmpfiles.d \
 	--disable-devsearch \
 	--disable-sasl \
-	--disable-offensive-insults \
 	--disable-package-build \
 	--disable-gss-krb5-ccache-name \
 	--disable-pvs-studio \
-- 
2.50.0

Re: [ptxdist] [APPLIED] sudo: version bump 1.9.15p5 -> 1.9.17p1

[Michael Olbrich]

Thanks, applied as 01e18e5b0683708b25e6a9b126d805d868e3c7a9.

Michael

[sent from post-receive hook]

On Sat, 05 Jul 2025 10:22:25 +0200, Bruno Thomsen <bruno.thomsen@gmail.com> wrote:
> Sudo insults are now included by default, but disabled unless
> the --with-insults configure option is specified or the insults
> sudoers option is enabled.
> 
> Fixes CVE-2025-32462 and CVE-2025-32463.
> 
> Copyright year update in license file.
> 
> Changelog: https://www.sudo.ws/releases/stable/#1.9.17p1
> 
> Signed-off-by: Bruno Thomsen <bruno.thomsen@gmail.com>
> Message-Id: <20250702134933.6035-1-bruno.thomsen@gmail.com>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index 83c3e7f8e89b..94234a3f4ede 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.15p5
> -SUDO_MD5	:= 4166279cb188ecb6641c7a2ba5f68270
> +SUDO_VERSION	:= 1.9.17p1
> +SUDO_MD5	:= 231106344ffe541fa8e0bd4caf322497
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> @@ -25,7 +25,7 @@ SUDO_URL	:= \
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> -SUDO_LICENSE_FILES := file://LICENSE.md;md5=5100e20d35f9015f9eef6bdb27ba194f
> +SUDO_LICENSE_FILES := file://LICENSE.md;md5=2841c822e587db145364ca95e9be2ffa
>  
>  # ----------------------------------------------------------------------------
>  # Prepare
> @@ -73,7 +73,6 @@ SUDO_CONF_OPT	:= \
>  	--disable-tmpfiles.d \
>  	--disable-devsearch \
>  	--disable-sasl \
> -	--disable-offensive-insults \
>  	--disable-package-build \
>  	--disable-gss-krb5-ccache-name \
>  	--disable-pvs-studio \