Received: by mail.netbsd.org (Postfix, from userid 605) id 2F4BA84DAF; Mon, 3 Feb 2020 07:47:57 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id 9953B84DB3 for ; Mon, 3 Feb 2020 07:47:56 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id 8jmwTIrH40SM for ; Mon, 3 Feb 2020 07:47:56 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 1477884DE0 for ; Mon, 3 Feb 2020 07:47:56 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 121ACFBF4; Mon, 3 Feb 2020 07:47:56 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_158071607644150" MIME-Version: 1.0 Date: Mon, 3 Feb 2020 07:47:56 +0000 From: "Kimmo Suominen" Subject: CVS commit: pkgsrc/security/sudo To: pkgsrc-changes@NetBSD.org Reply-To: kim@netbsd.org X-Mailer: log_accum Message-Id: <20200203074756.121ACFBF4@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: pkgsrc-changes.NetBSD.org Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_158071607644150 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: kim Date: Mon Feb 3 07:47:56 UTC 2020 Modified Files: pkgsrc/security/sudo: Makefile distinfo Log Message: Update to sudo 1.8.31 What's new: * Fixed CVE-2019-18634, a buffer overflow when the "pwfeedback" sudoers option is enabled on systems with uni-directional pipes. * The "sudoedit_checkdir" option now treats a user-owned directory as writable, even if it does not have the write bit set at the time of check. Symbolic links will no longer be followed by sudoedit in any user-owned directory. Bug #912 * Fixed sudoedit on macOS 10.15 and above where the root file system is mounted read-only. Bug #913. * Fixed a crash introduced in sudo 1.8.30 when suspending sudo at the password prompt. Bug #914. * Fixed compilation on systems where the mmap MAP_ANON flag is not available. Bug #915. To generate a diff of this commit: cvs rdiff -u -r1.177 -r1.178 pkgsrc/security/sudo/Makefile cvs rdiff -u -r1.108 -r1.109 pkgsrc/security/sudo/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_158071607644150 Content-Disposition: inline Content-Length: 1852 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/sudo/Makefile diff -u pkgsrc/security/sudo/Makefile:1.177 pkgsrc/security/sudo/Makefile:1.178 --- pkgsrc/security/sudo/Makefile:1.177 Thu Jan 30 21:07:59 2020 +++ pkgsrc/security/sudo/Makefile Mon Feb 3 07:47:55 2020 @@ -1,7 +1,6 @@ -# $NetBSD: Makefile,v 1.177 2020/01/30 21:07:59 triaxx Exp $ +# $NetBSD: Makefile,v 1.178 2020/02/03 07:47:55 kim Exp $ -DISTNAME= sudo-1.8.30 -PKGREVISION= 2 +DISTNAME= sudo-1.8.31 CATEGORIES= security MASTER_SITES= https://www.sudo.ws/dist/ MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/ Index: pkgsrc/security/sudo/distinfo diff -u pkgsrc/security/sudo/distinfo:1.108 pkgsrc/security/sudo/distinfo:1.109 --- pkgsrc/security/sudo/distinfo:1.108 Wed Jan 1 01:47:29 2020 +++ pkgsrc/security/sudo/distinfo Mon Feb 3 07:47:55 2020 @@ -1,9 +1,9 @@ -$NetBSD: distinfo,v 1.108 2020/01/01 01:47:29 kim Exp $ +$NetBSD: distinfo,v 1.109 2020/02/03 07:47:55 kim Exp $ -SHA1 (sudo-1.8.30.tar.gz) = 5b30363d4b23ea7edfb882e7224e1fd1111dd106 -RMD160 (sudo-1.8.30.tar.gz) = 853e704b1c60dff84e1b13bbdeca9c8ca4bed988 -SHA512 (sudo-1.8.30.tar.gz) = d44831feabd92d736614239e0e0f086829d84b213c98524fffb4b926a96715b1156538a7ab5e0b6e0db8be67a6e24a1642b3648105b076d23b58c39d0dd947af -Size (sudo-1.8.30.tar.gz) = 3349455 bytes +SHA1 (sudo-1.8.31.tar.gz) = 24222b6fb644354c944bc024a0f77548b289410d +RMD160 (sudo-1.8.31.tar.gz) = 8f67e551df2f528983f675cda6c9c908f9f1950b +SHA512 (sudo-1.8.31.tar.gz) = b9e408a322938c7a712458e9012d8a5f648fba5b23a5057cf5d8372c7f931262595f1575c32c32b9cb1a04af670ff4611e7df48d197e5c4cc038d6b65439a28a +Size (sudo-1.8.31.tar.gz) = 3350674 bytes SHA1 (patch-Makefile.in) = e8813e1aa208d9ef6304038328504a5402341560 SHA1 (patch-configure) = 906a90a8e8f5397693d9f410b7715439cf029508 SHA1 (patch-plugins_sudoers_Makefile.in) = 730193c6437197a7114dd31886050cecdcba6772 --_----------=_158071607644150--