Received: by mail.netbsd.org (Postfix, from userid 605) id A345084EE5; Mon, 6 Feb 2023 14:35:33 +0000 (UTC) Received: from localhost (localhost [127.0.0.1]) by mail.netbsd.org (Postfix) with ESMTP id D25A384CDC for ; Mon, 6 Feb 2023 14:35:32 +0000 (UTC) X-Virus-Scanned: amavisd-new at netbsd.org Received: from mail.netbsd.org ([127.0.0.1]) by localhost (mail.netbsd.org [127.0.0.1]) (amavisd-new, port 10025) with ESMTP id ZrrVzlMBXCiq for ; Mon, 6 Feb 2023 14:35:32 +0000 (UTC) Received: from cvs.NetBSD.org (ivanova.netbsd.org [199.233.217.197]) by mail.netbsd.org (Postfix) with ESMTP id 3EE6584C13 for ; Mon, 6 Feb 2023 14:35:32 +0000 (UTC) Received: by cvs.NetBSD.org (Postfix, from userid 500) id 32399FA90; Mon, 6 Feb 2023 14:35:32 +0000 (UTC) Content-Transfer-Encoding: 7bit Content-Type: multipart/mixed; boundary="_----------=_1675694132169280" MIME-Version: 1.0 Date: Mon, 6 Feb 2023 14:35:32 +0000 From: "Takahiro Kambe" Subject: CVS commit: pkgsrc/security/sudo To: pkgsrc-changes@NetBSD.org Reply-To: taca@netbsd.org X-Mailer: log_accum Message-Id: <20230206143532.32399FA90@cvs.NetBSD.org> Sender: pkgsrc-changes-owner@NetBSD.org List-Id: Precedence: bulk List-Unsubscribe: This is a multi-part message in MIME format. --_----------=_1675694132169280 Content-Disposition: inline Content-Transfer-Encoding: 8bit Content-Type: text/plain; charset="US-ASCII" Module Name: pkgsrc Committed By: taca Date: Mon Feb 6 14:35:32 UTC 2023 Modified Files: pkgsrc/security/sudo: Makefile distinfo Log Message: security/sudo: update to 1.9.12p2 1.9.12.p2 (2023-01-18) * Fixed a compilation error on Linux/aarch64. GitHub issue #197. * Fixed a potential crash introduced in the fix for GitHub issue #134. If a user's sudoers entry did not have any RunAs user's set, running "sudo -U otheruser -l" would dereference a NULL pointer. * Fixed a bug introduced in sudo 1.9.12 that could prevent sudo from creating a I/O files when the "iolog_file" sudoers setting contains six or more Xs. * Fixed CVE-2023-22809, a flaw in sudo's -e option (aka sudoedit) that coud allow a malicious user with sudoedit privileges to edit arbitrary files. To generate a diff of this commit: cvs rdiff -u -r1.193 -r1.194 pkgsrc/security/sudo/Makefile cvs rdiff -u -r1.125 -r1.126 pkgsrc/security/sudo/distinfo Please note that diffs are not public domain; they are subject to the copyright notices on the relevant files. --_----------=_1675694132169280 Content-Disposition: inline Content-Length: 1756 Content-Transfer-Encoding: binary Content-Type: text/x-diff; charset=us-ascii Modified files: Index: pkgsrc/security/sudo/Makefile diff -u pkgsrc/security/sudo/Makefile:1.193 pkgsrc/security/sudo/Makefile:1.194 --- pkgsrc/security/sudo/Makefile:1.193 Mon Nov 7 14:26:57 2022 +++ pkgsrc/security/sudo/Makefile Mon Feb 6 14:35:32 2023 @@ -1,6 +1,6 @@ -# $NetBSD: Makefile,v 1.193 2022/11/07 14:26:57 taca Exp $ +# $NetBSD: Makefile,v 1.194 2023/02/06 14:35:32 taca Exp $ -DISTNAME= sudo-1.9.12p1 +DISTNAME= sudo-1.9.12p2 CATEGORIES= security MASTER_SITES= https://www.sudo.ws/dist/ MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/ Index: pkgsrc/security/sudo/distinfo diff -u pkgsrc/security/sudo/distinfo:1.125 pkgsrc/security/sudo/distinfo:1.126 --- pkgsrc/security/sudo/distinfo:1.125 Mon Nov 7 14:26:57 2022 +++ pkgsrc/security/sudo/distinfo Mon Feb 6 14:35:32 2023 @@ -1,8 +1,8 @@ -$NetBSD: distinfo,v 1.125 2022/11/07 14:26:57 taca Exp $ +$NetBSD: distinfo,v 1.126 2023/02/06 14:35:32 taca Exp $ -BLAKE2s (sudo-1.9.12p1.tar.gz) = c7f87e66e9cfa2c3fc09e84950c9e3b5c4ad5a0428ffb84e9308de67ed6be4f5 -SHA512 (sudo-1.9.12p1.tar.gz) = 6f564112aa1e0e9cd223adb280bd430d513109c031e52deca308501234dedc0d7418f13cbb9b4249ac58d997cfdae1908c280c26733acbc55dbf9db45dff239a -Size (sudo-1.9.12p1.tar.gz) = 4908060 bytes +BLAKE2s (sudo-1.9.12p2.tar.gz) = cb2f434ec3754978898471bba89a2f4ffa8e342ab9d8ad4b8a32995fb0c53f37 +SHA512 (sudo-1.9.12p2.tar.gz) = 5e035246137d5820691f7ddfc13faec3886e3cf1563ed56633667d86ab4f1306f34cc0e27808f56790b6c6a4614826e54c5b7e47b31eb009b96dde3e52170c45 +Size (sudo-1.9.12p2.tar.gz) = 4909431 bytes SHA1 (patch-Makefile.in) = 1a83c55d27829013e2e23073046c5c39b020fafe SHA1 (patch-configure) = da1f0d89f7dc5d56734fc69f190189ccdfc8b043 SHA1 (patch-examples_Makefile.in) = a20967ecd88eb5e4a8b47e6a3b80bc18be713409 --_----------=_1675694132169280--