From mboxrd@z Thu Jan 1 00:00:00 1970 Delivery-date: Fri, 08 Mar 2024 11:57:54 +0100 Received: from metis.whiteo.stw.pengutronix.de ([2a0a:edc0:2:b01:1d::104]) by lore.white.stw.pengutronix.de with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1riXvG-00DbtB-0K for lore@lore.pengutronix.de; Fri, 08 Mar 2024 11:57:54 +0100 Received: from localhost ([127.0.0.1] helo=metis.whiteo.stw.pengutronix.de) by metis.whiteo.stw.pengutronix.de with esmtp (Exim 4.92) (envelope-from ) id 1riXvF-0007yW-Ty; Fri, 08 Mar 2024 11:57:53 +0100 Received: from mail.ela-soft.com ([213.23.49.162]) by metis.whiteo.stw.pengutronix.de with esmtps (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1riXuy-0007uH-QY for ptxdist@pengutronix.de; Fri, 08 Mar 2024 11:57:37 +0100 Received: from [192.168.220.154] (i5E862D7C.versanet.de [94.134.45.124]) by mail.ela-soft.com (mailsystem) with ESMTPSA id 15843B51E for ; Fri, 8 Mar 2024 11:57:36 +0100 (CET) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ela-soft.com; s=2021; t=1709895456; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding: in-reply-to:in-reply-to:references:references:autocrypt:autocrypt; bh=uXbwf8CzA2Fc7ScHbvBeW9Ey0ad8r15UioMMhbycSPQ=; b=H1uF3+kh99pvfvSNil8A/NOyedqGqtpQLYQ8rfde88X9cqVuY4/Wql/5QuS6Uernxhoywr KZdiQ12TKmfzXZPEqMJaieJ0LoqLHqBrdtCOEXers3NTVtWHvvVhNd/TD4c4bhDtOYNHzs 3cngVG+2mcNYCGatgfLXRmq9ucCHeStm7LkxxKs57tK/7MMcKs/LgUJsjA6Et01Bi56p5f +bsFN4wEDvwKW/NBhmBlSaNGbSvBacvFftJbqb0sliESwMEWTvTQ0c/yABOoGddFuLHGgw dY5a3+hlU/AUR8Wuc9V6tgYDsFf3+Ic7HpIWg0r53G9GFujNpAdNf1ngfY0Kug== Message-ID: Date: Fri, 8 Mar 2024 11:57:35 +0100 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird To: ptxdist@pengutronix.de References: <20240225151204.54557-4-ahelmcke@ela-soft.com> Content-Language: de-DE, en-US From: Andreas Helmcke Autocrypt: addr=ahelmcke@ela-soft.com; keydata= xsDiBDqtzDQRBADYJNLjNC+RK93Lhqx89UudxF0GIBfb+7AzjKRMe1aWRB5o3a14vm7ScQh+ xFIw8j2jaxM1jNZ/6eZw3nT8vy/3gRVazBnJg/JXKxU0axpvCwioodS8UKy82Wp89Gya+yhF IH10Q/2Rp2Y33oxbmwAl/YSS8eqN2oPjCrnCbEWcQQCg/w2d6Pwilu2ajlxtNby1lXOs7R0E AIveEzbSpi5hFsUgRz3MEnvBxTYvP3F0yU8x/LPl08FTa+0kNb+8FVqPxNPenBAtX0mRPLLA BRknO9xEQ8Zi1bnQ3/1Gcj1W+92XIClMkFJWTxPn5lmHOLsH1K/FaWEDS9z1+usxgPVDUVxT MbPSxhXxJU7S9tC02noI0rB1/0WLBACGNP3II9pZ5cZJP7ZBje/LtZCMK+anx6Ix9DHBpedL kkPYFBwSCEB9AciFtPa0IVkuvynqnyeiyfdwQK7ul9nMowjSWarnmWcdQkByfMNzEdVQF1oy IV+FJCx3bPYc6Bxb8mRmwEK7s6i8Y3qdgFwyyphGTWkMcFtvTr/Tknf3L80nQW5kcmVhcyBI ZWxtY2tlIDxhaGVsbWNrZUBlbGEtc29mdC5jb20+wn0EExEIAD0CGwMGCwkIBwMCBBUCCAME FgIDAQIeAQIXgBYhBFA9ZZ0xTAe07lSeJg1WleJJOvBfBQJiuyA3BQkrwowDAAoJEA1WleJJ OvBfdCgAoNRkGKBA2rMuyYhUv99ZxZMvqyd7AJ9PeDsEDdRcbUtuXHVy9G1O8Daz687BTQQ6 rcw0EAgA9kJXtwh/CBdyorrWqULzBej5UxE5T7bxbrlLOCDaAadWoxTpj0BV89AHxstDqZSt 90xkhkn4DIO9ZekX1KHTUPj1WV/cdlJPPT2N286Z4VeSWc39uK50T8X8dryDxUcwYc58yWb/ Ffm7/ZFexwGq01uejaClcjrUGvC/RgBYK+X0iP1YTknbzSC0neSRBzZrM2w4DUUdD3yIsxx8 Wy2O9vPJI8BD8KVbGI2Ou1WMuF040zT9fBdXQ6MdGGzeMyEstSr/POGxKUAYEY18hKcKctaG xAMZyAcpesqVDNmWn6vQClCbAkbTCD1mpF1Bn5x8vYlLIhkmuquiXsNV6TILOwACAggAwYsD zwilCtMj1WbBxKHhjyLf57L0AJsHx1SB8gixbvSS9Z1lvWri7UXwljvI747af56DgwxWs+/p c/voH/xkVHdgSEf4AuUc2lWQcoFmNHo8QJKN4An1j1H7DvJXKyffRLHj7YsgQ7NPs8/FsPm9 69oHX61xuzRiY7ndi34DduMjChFvoWV/ddQjitjvekP5gCm64TGQg23mUMGixuTWXAgUmgN0 fHPieqYXqVvEgwChgm1iZQJDSQ0sYRfOqfMK4vvwQCp6aSlRPrd06EKaOvxCL8HWUWX7tPzt n3BwxNU8uWqXFejPTymRry3WsoABRgpBvAhO8+ByoRA1ZV9EK8JpBBgRCAApBRsMAAAAFiEE UD1lnTFMB7TuVJ4mDVaV4kk68F8FAmK7IDgFCSvCjAMACgkQDVaV4kk68F971QCfdAx/iSSd dAtyCVc29GEW8zOnNikAnRd3L/RtOOHEcA01APdZ9+uQrKUM In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on metis.whiteo.stw.pengutronix.de X-Spam-Level: X-Spam-Status: No, score=-102.1 required=4.0 tests=AWL,BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,SPF_HELO_NONE,SPF_PASS, T_SCC_BODY_TEXT_LINE,USER_IN_WELCOMELIST,USER_IN_WHITELIST autolearn=ham autolearn_force=no version=3.4.2 Subject: Re: [ptxdist] [PATCH] sudo: version bump 1.9.14p3 -> 1.9.15p5 X-BeenThere: ptxdist@pengutronix.de X-Mailman-Version: 2.1.29 Precedence: list List-Id: PTXdist Development Mailing List List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: ptxdist@pengutronix.de Sender: "ptxdist" X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: ptxdist-bounces@pengutronix.de X-SA-Exim-Scanned: No (on metis.whiteo.stw.pengutronix.de); SAEximRunCond expanded to false Am 08.03.24 um 09:25 schrieb Michael Olbrich: > On Sun, Feb 25, 2024 at 04:12:03PM +0100, Andreas Helmcke wrote: >> various bugfixes, including fixes for CVE-2023-42465 and CVE-2023-42456 >> >> Full info: https://www.sudo.ws/releases/stable/#1.9.15p5 >> >> Signed-off-by: Andreas Helmcke >> --- >> rules/sudo.make | 11 +++++------ >> 1 file changed, 5 insertions(+), 6 deletions(-) >> >> diff --git a/rules/sudo.make b/rules/sudo.make >> index 93b92ad69..2e2f7845b 100644 >> --- a/rules/sudo.make >> +++ b/rules/sudo.make >> @@ -15,13 +15,13 @@ PACKAGES-$(PTXCONF_SUDO) += sudo >> # >> # Paths and names >> # >> -SUDO_VERSION := 1.9.14p3 >> -SUDO_MD5 := 4cc21cf7c9a89290b230954aed0d1e11 >> +SUDO_VERSION := 1.9.15p5 >> +SUDO_MD5 := 4166279cb188ecb6641c7a2ba5f68270 >> SUDO := sudo-$(SUDO_VERSION) >> SUDO_SUFFIX := tar.gz >> SUDO_URL := \ >> - https://www.sudo.ws/sudo/dist/$(SUDO).$(SUDO_SUFFIX) \ >> - https://www.sudo.ws/sudo/dist/OLD/$(SUDO).$(SUDO_SUFFIX) >> + http://www.sudo.ws/sudo/dist/$(SUDO).$(SUDO_SUFFIX) \ >> + http://www.sudo.ws/sudo/dist/OLD/$(SUDO).$(SUDO_SUFFIX) >> SUDO_SOURCE := $(SRCDIR)/$(SUDO).$(SUDO_SUFFIX) >> SUDO_DIR := $(BUILDDIR)/$(SUDO) >> SUDO_LICENSE := ISC AND BSD-3-Clause AND BSD-2-Clause-NetBSD AND Zlib >> @@ -36,8 +36,7 @@ SUDO_CONF_ENV := \ >> sudo_cv_func_fnmatch=yes \ >> sudo_cv_func_unsetenv_void=no \ >> ac_cv_have_working_snprintf=yes \ >> - ac_cv_have_working_vsnprintf=yes \ >> - ac_cv_lib_md_SHA224Update=no > > Why did you remove this? It prevents sudo from linking to libmd. > This was on accident, i used an outdated version of sudo.make to prepared the patch. > >> + ac_cv_have_working_vsnprintf=yes >> >> # >> # autoconf >> -- >> 2.40.1 >> >> >> > -- Mit freundlichen Grüßen / Best regards i. A. Andreas Helmcke Hard- und Softwareentwickler / Hard- and Software Developer ela-soft GmbH Entwicklung|GEMOS access / Development|GEMOS access Breitenbachstraße 10 13509 Berlin Germany Phone +49 30 891003-0 Fax +49 30 891003-22 ahelmcke@ela-soft.com http://www.ela-soft.com ela-soft GmbH / Company of limited liability Sitz der Gesellschaft: Berlin / Place of residence: Berlin Handelsregistereintrag / Commercial Register entry: Amtsgericht Bln Charlottenburg, HRB 114128 B Geschäftsführer / Board of directors: Tim Rosenberger