From mboxrd@z Thu Jan  1 00:00:00 1970
Return-path: <ptxdist-bounces@pengutronix.de>
In-Reply-To: <20210127000427.19719-1-rhi@pengutronix.de>
MIME-Version: 1.0
Message-Id: <E1l7CK2-007T6y-E1@dude03.red.stw.pengutronix.de>
From: Michael Olbrich <mol@pengutronix.de>
Date: Wed, 03 Feb 2021 08:11:30 +0100
Subject: Re: [ptxdist] [APPLIED] sudo: version bump 1.9.3 -> 1.9.5p2
List-Id: PTXdist Development Mailing List <ptxdist.pengutronix.de>
List-Unsubscribe: <http://metis.pengutronix.de/cgi-bin/mailman/options/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=unsubscribe>
List-Archive: <http://metis.pengutronix.de/cgi-bin/mailman/private/ptxdist/>
List-Post: <mailto:ptxdist@pengutronix.de>
List-Help: <mailto:ptxdist-request@pengutronix.de?subject=help>
List-Subscribe: <http://metis.pengutronix.de/cgi-bin/mailman/listinfo/ptxdist>, 
 <mailto:ptxdist-request@pengutronix.de?subject=subscribe>
Reply-To: ptxdist@pengutronix.de
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: ptxdist-bounces@pengutronix.de
Sender: "ptxdist" <ptxdist-bounces@pengutronix.de>
To: ptxdist@pengutronix.de
Cc: Roland Hieber <rhi@pengutronix.de>

Thanks, applied as 7a7f59c0b7f331e98e47e0b402beb3413f71a226.

Michael

[sent from post-receive hook]

On Wed, 03 Feb 2021 08:11:30 +0100, Roland Hieber <rhi@pengutronix.de> wrote:
> Update license MD5 sum, only the copyright date was bumped to 2021.
> 
> Highlights from the changelog [1]:
> 
> * Fixed CVE-2021-23239, a potential information leak in sudoedit that
>   could be used to test for the existence of directories not normally
>   accessible to the user in certain circumstances.
> 
> * Fixed CVE-2021-23240, a flaw in the temporary file handling of
>   sudoedit's SELinux RBAC support.
> 
> * Fixed a potential buffer overflow when unescaping backslashes in the
>   command's arguments (CVE-2021-3156 "Baron Samedit")
> 
> [1]: https://www.sudo.ws/stable.html#1.9.5p2
> 
> Signed-off-by: Roland Hieber <rhi@pengutronix.de>
> Message-Id: <20210127000427.19719-1-rhi@pengutronix.de>
> Signed-off-by: Michael Olbrich <m.olbrich@pengutronix.de>
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index efd420674bbd..a10969da5b29 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,8 +15,8 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.3
> -SUDO_MD5	:= ecf74b49275f15a3e46f1903c6cb2211
> +SUDO_VERSION	:= 1.9.5p2
> +SUDO_MD5	:= e6bc4c18c06346e6b3431637a2b5f3d5
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> @@ -25,7 +25,7 @@ SUDO_URL	:= \
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> -SUDO_LICENSE_FILES := file://doc/LICENSE;md5=828cd502ad216ff869bf83adf3301e02
> +SUDO_LICENSE_FILES := file://doc/LICENSE;md5=fdff64d4fd19126330aa81b94d167173
>  
>  # ----------------------------------------------------------------------------
>  # Prepare
> @@ -77,8 +77,11 @@ SUDO_AUTOCONF = \
>  	--disable-package-build \
>  	--disable-gss-krb5-ccache-name \
>  	--disable-pvs-studio \
> +	--disable-log-server \
> +	--enable-log-client \
>  	--disable-sia \
>  	$(GLOBAL_LARGE_FILE_OPTION) \
> +	--disable-python \
>  	--disable-pam-session \
>  	--disable-kerb5-instance \
>  	--without-AFS \

_______________________________________________
ptxdist mailing list
ptxdist@pengutronix.de
To unsubscribe, send a mail with subject "unsubscribe" to ptxdist-request@pengutronix.de