Re: [ptxdist] [PATCH] sudo: version bump 1.9.14p3 -> 1.9.15p5

[Michael Olbrich <m.olbrich@pengutronix.de>]

On Sun, Feb 25, 2024 at 04:12:03PM +0100, Andreas Helmcke wrote:
> various bugfixes, including fixes for CVE-2023-42465 and CVE-2023-42456
> 
> Full info: https://www.sudo.ws/releases/stable/#1.9.15p5
> 
> Signed-off-by: Andreas Helmcke <ahelmcke@ela-soft.com>
> ---
>  rules/sudo.make | 11 +++++------
>  1 file changed, 5 insertions(+), 6 deletions(-)
> 
> diff --git a/rules/sudo.make b/rules/sudo.make
> index 93b92ad69..2e2f7845b 100644
> --- a/rules/sudo.make
> +++ b/rules/sudo.make
> @@ -15,13 +15,13 @@ PACKAGES-$(PTXCONF_SUDO) += sudo
>  #
>  # Paths and names
>  #
> -SUDO_VERSION	:= 1.9.14p3
> -SUDO_MD5	:= 4cc21cf7c9a89290b230954aed0d1e11
> +SUDO_VERSION	:= 1.9.15p5
> +SUDO_MD5	:= 4166279cb188ecb6641c7a2ba5f68270
>  SUDO		:= sudo-$(SUDO_VERSION)
>  SUDO_SUFFIX	:= tar.gz
>  SUDO_URL	:= \
> -	https://www.sudo.ws/sudo/dist/$(SUDO).$(SUDO_SUFFIX) \
> -	https://www.sudo.ws/sudo/dist/OLD/$(SUDO).$(SUDO_SUFFIX)
> +	http://www.sudo.ws/sudo/dist/$(SUDO).$(SUDO_SUFFIX) \
> +	http://www.sudo.ws/sudo/dist/OLD/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_SOURCE	:= $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX)
>  SUDO_DIR	:= $(BUILDDIR)/$(SUDO)
>  SUDO_LICENSE	:= ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib
> @@ -36,8 +36,7 @@ SUDO_CONF_ENV	:= \
>  	sudo_cv_func_fnmatch=yes \
>  	sudo_cv_func_unsetenv_void=no \
>  	ac_cv_have_working_snprintf=yes \
> -	ac_cv_have_working_vsnprintf=yes \
> -	ac_cv_lib_md_SHA224Update=no

Why did you remove this? It prevents sudo from linking to libmd.

Michael

> +	ac_cv_have_working_vsnprintf=yes
>  
>  #
>  # autoconf
> -- 
> 2.40.1
> 
> 
> 

-- 
Pengutronix e.K.                           |                             |
Steuerwalder Str. 21                       | http://www.pengutronix.de/  |
31137 Hildesheim, Germany                  | Phone: +49-5121-206917-0    |
Amtsgericht Hildesheim, HRA 2686           | Fax:   +49-5121-206917-5555 |