[ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2

[ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2

[Roland Hieber]

Update license MD5 sum, only the copyright date was bumped to 2021.

Highlights from the changelog [1]:

* Fixed CVE-2021-23239, a potential information leak in sudoedit that
  could be used to test for the existence of directories not normally
  accessible to the user in certain circumstances.

* Fixed CVE-2021-23240, a flaw in the temporary file handling of
  sudoedit's SELinux RBAC support.

* Fixed a potential buffer overflow when unescaping backslashes in the
  command's arguments (CVE-2021-3156 "Baron Samedit")

[1]: https://www.sudo.ws/stable.html#1.9.5p2

Signed-off-by: Roland Hieber <rhi@pengutronix.de>
---
 rules/sudo.make | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/rules/sudo.make b/rules/sudo.make
index efd420674bbd..a10969da5b29 100644
--- a/rules/sudo.make
+++ b/rules/sudo.make
@@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
 #
 # Paths and names
 #
-SUDO_VERSION	:= 1.9.3
-SUDO_MD5	:= ecf74b49275f15a3e46f1903c6cb2211
+SUDO_VERSION	:= 1.9.5p2
+SUDO_MD5	:= e6bc4c18c06346e6b3431637a2b5f3d5
 SUDO		:= sudo-$(SUDO_VERSION)
 SUDO_SUFFIX	:= tar.gz
 SUDO_URL	:= \
@@ -25,7 +25,7 @@ SUDO_URL	:= \
 SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
 SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
 SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
-SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02
+SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173
 
 # ----------------------------------------------------------------------------
 # Prepare
@@ -77,8 +77,11 @@ SUDO_AUTOCONF = \
 	--disable-package-build \
 	--disable-gss-krb5-ccache-name \
 	--disable-pvs-studio \
+	--disable-log-server \
+	--enable-log-client \
 	--disable-sia \
 	$(GLOBAL_LARGE_FILE_OPTION) \
+	--disable-python \
 	--disable-pam-session \
 	--disable-kerb5-instance \
 	--without-AFS \
-- 
2.30.0


_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] [PATCH] sudo: version bump 1.9.3 -> 1.9.5p2

[Roland Hieber]

On Wed, Jan 27, 2021 at 01:04:27AM +0100, Roland Hieber wrote:
> Update license MD5 sum, only the copyright date was bumped to 2021.
> 
> Highlights from the changelog [1]:
> 
> * Fixed CVE-2021-23239, a potential information leak in sudoedit that
>   could be used to test for the existence of directories not normally
>   accessible to the user in certain circumstances.
> 
> * Fixed CVE-2021-23240, a flaw in the temporary file handling of
>   sudoedit's SELinux RBAC support.
> 
> * Fixed a potential buffer overflow when unescaping backslashes in the
>   command's arguments (CVE-2021-3156 "Baron Samedit")
> 
> [1]: https://www.sudo.ws/stable.html#1.9.5p2
> 
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> ---
>  rules/sudo.make | 9 ++++++---
>  1 file changed, 6 insertions(+), 3 deletions(-)
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index efd420674bbd..a10969da5b29 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.3
> -SUDO_MD5	:= ecf74b49275f15a3e46f1903c6cb2211
> +SUDO_VERSION	:= 1.9.5p2
> +SUDO_MD5	:= e6bc4c18c06346e6b3431637a2b5f3d5
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> @@ -25,7 +25,7 @@ SUDO_URL	:= \
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> -SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02
> +SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173
>  
>  # ----------------------------------------------------------------------------
>  # Prepare
> @@ -77,8 +77,11 @@ SUDO_AUTOCONF = \
>  	--disable-package-build \
>  	--disable-gss-krb5-ccache-name \
>  	--disable-pvs-studio \
> +	--disable-log-server \
> +	--enable-log-client \

Side note: I wanted to disable this option, but then it didn't build
because of unresolved references to audit_to_eventlog in
plugins/sudoers/audit.c line 404 – however, I could not reproduce this
when building on the host, where it built just fine, and I don't
understand how… :-/

[1]: https://github.com/sudo-project/sudo/blob/master/plugins/sudoers/audit.c#L404

 - Roland

>  	--disable-sia \
>  	$(GLOBAL_LARGE_FILE_OPTION) \
> +	--disable-python \
>  	--disable-pam-session \
>  	--disable-kerb5-instance \
>  	--without-AFS \
> -- 
> 2.30.0
> 
> 
> _______________________________________________
> ptxdist mailing list
> ptxdist@pengutronix.de
> To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de
> 

-- 
Roland Hieber, Pengutronix e.K.          | r.hieber@pengutronix.de     |
Steuerwalder Str. 21                     | https://www.pengutronix.de/ |
31137 Hildesheim, Germany                | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686         | Fax:   +49-5121-206917-5555 |

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de

Re: [ptxdist] [APPLIED] sudo: version bump 1.9.3 -> 1.9.5p2

[Michael Olbrich]

Thanks, applied as 7a7f59c0b7f331e98e47e0b402beb3413f71a226.

Michael

[sent from post-receive hook]

On Wed, 03 Feb 2021 08:11:30 +0100, Roland Hieber <rhi@pengutronix.de> wrote:
> Update license MD5 sum, only the copyright date was bumped to 2021.
> 
> Highlights from the changelog [1]:
> 
> * Fixed CVE-2021-23239, a potential information leak in sudoedit that
>   could be used to test for the existence of directories not normally
>   accessible to the user in certain circumstances.
> 
> * Fixed CVE-2021-23240, a flaw in the temporary file handling of
>   sudoedit's SELinux RBAC support.
> 
> * Fixed a potential buffer overflow when unescaping backslashes in the
>   command's arguments (CVE-2021-3156 "Baron Samedit")
> 
> [1]: https://www.sudo.ws/stable.html#1.9.5p2
> 
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> Message-Id: <20210127000427.19719-1-rhi@pengutronix.de>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index efd420674bbd..a10969da5b29 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.3
> -SUDO_MD5	:= ecf74b49275f15a3e46f1903c6cb2211
> +SUDO_VERSION	:= 1.9.5p2
> +SUDO_MD5	:= e6bc4c18c06346e6b3431637a2b5f3d5
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> @@ -25,7 +25,7 @@ SUDO_URL	:= \
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> -SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02
> +SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173
>  
>  # ----------------------------------------------------------------------------
>  # Prepare
> @@ -77,8 +77,11 @@ SUDO_AUTOCONF = \
>  	--disable-package-build \
>  	--disable-gss-krb5-ccache-name \
>  	--disable-pvs-studio \
> +	--disable-log-server \
> +	--enable-log-client \
>  	--disable-sia \
>  	$(GLOBAL_LARGE_FILE_OPTION) \
> +	--disable-python \
>  	--disable-pam-session \
>  	--disable-kerb5-instance \
>  	--without-AFS \

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de