---
- branch: MAIN
  date: Wed Feb 11 09:11:59 UTC 2015
  files:
  - new: '1.145'
    old: '1.144'
    path: pkgsrc/security/sudo/Makefile
    pathrev: pkgsrc/security/sudo/Makefile@1.145
    type: modified
  - new: '1.82'
    old: '1.81'
    path: pkgsrc/security/sudo/distinfo
    pathrev: pkgsrc/security/sudo/distinfo@1.82
    type: modified
  id: 20150211T091159Z.4b2b972cbfd161b7e36c5446268202fc6e6f40fd
  log: |
    update of sudo to the next upstream patch version (1.7.10p8 to 1.7.10p9)

    Upstream Changelog:

    +   The TZ environment variable is now checked for safety instead of
        simply being copied to the environment of the command.
        This fixes a potential security issue.

    +   Sudo now only builds Position Independent Executables (PIE) by
        default on Linux systems and verifies that a trivial test program
        builds and runs.

    +   On Solaris 11.1 and higher, sudo binaries will now have the ASLR tag
        enabled if supported by the linker.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/sudo'
  unixtime: '1423645919'
  user: spz