Mon Nov 7 14:26:57 2022 UTC ()
security/sudo: update to 1.9.12p1

1.9.12p1 (2022-11-07)

What's new in Sudo 1.9.12p1

 * Sudo's configure script now does a better job of detecting when
   the -fstack-clash-protection compiler option does not work.
   GitHub issue #191.

 * Fixed CVE-2022-43995, a potential out-of-bounds write for passwords
   smaller than 8 characters when passwd authentication is enabled.
   This does not affect configurations that use other authentication
   methods such as PAM, AIX authentication or BSD authentication.

 * Fixed a build error with some configurations compiling host_port.c.


(taca)
diff -r1.192 -r1.193 pkgsrc/security/sudo/Makefile
diff -r1.124 -r1.125 pkgsrc/security/sudo/distinfo
diff -r1.1 -r0 pkgsrc/security/sudo/patches/patch-plugins_sudoers_auth_passwd.c
cvs diff -r1.192 -r1.193 pkgsrc/security/sudo/Makefile (expand / switch to unified diff)

--- pkgsrc/security/sudo/Makefile 2022/11/04 00:58:00 1.192
+++ pkgsrc/security/sudo/Makefile 2022/11/07 14:26:57 1.193
@@ -1,17 +1,16 @@ @@ -1,17 +1,16 @@
1# $NetBSD: Makefile,v 1.192 2022/11/04 00:58:00 taca Exp $ 1# $NetBSD: Makefile,v 1.193 2022/11/07 14:26:57 taca Exp $
2 2
3DISTNAME= sudo-1.9.12 3DISTNAME= sudo-1.9.12p1
4PKGREVISION= 1 
5CATEGORIES= security 4CATEGORIES= security
6MASTER_SITES= https://www.sudo.ws/dist/ 5MASTER_SITES= https://www.sudo.ws/dist/
7MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/ 6MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/
8MASTER_SITES+= ftp://ftp.uwsg.indiana.edu/pub/security/sudo/ 7MASTER_SITES+= ftp://ftp.uwsg.indiana.edu/pub/security/sudo/
9MASTER_SITES+= http://ftp.twaren.net/Unix/Security/Sudo/ 8MASTER_SITES+= http://ftp.twaren.net/Unix/Security/Sudo/
10MASTER_SITES+= http://ftp.tux.org/pub/security/sudo/ 9MASTER_SITES+= http://ftp.tux.org/pub/security/sudo/
11 10
12MAINTAINER= pkgsrc-users@NetBSD.org 11MAINTAINER= pkgsrc-users@NetBSD.org
13HOMEPAGE= https://www.sudo.ws/ 12HOMEPAGE= https://www.sudo.ws/
14COMMENT= Allow others to run commands as root 13COMMENT= Allow others to run commands as root
15LICENSE= isc AND modified-bsd 14LICENSE= isc AND modified-bsd
16 15
17USE_LIBTOOL= yes 16USE_LIBTOOL= yes
cvs diff -r1.124 -r1.125 pkgsrc/security/sudo/distinfo (expand / switch to unified diff)

--- pkgsrc/security/sudo/distinfo 2022/11/04 00:58:00 1.124
+++ pkgsrc/security/sudo/distinfo 2022/11/07 14:26:57 1.125
@@ -1,13 +1,12 @@ @@ -1,13 +1,12 @@
1$NetBSD: distinfo,v 1.124 2022/11/04 00:58:00 taca Exp $ 1$NetBSD: distinfo,v 1.125 2022/11/07 14:26:57 taca Exp $
2 2
3BLAKE2s (sudo-1.9.12.tar.gz) = e832414e92c0608e173f8ccb06a1cb8632c3be51b5905580d426b0984b049c0f 3BLAKE2s (sudo-1.9.12p1.tar.gz) = c7f87e66e9cfa2c3fc09e84950c9e3b5c4ad5a0428ffb84e9308de67ed6be4f5
4SHA512 (sudo-1.9.12.tar.gz) = 34ee165baa2e37ba2530901d49bf0dad30159f27aeccd2519d4719bf93be8281edff71220a49ba2e41dacaa3c58031de1464df48d75a8caea7b9568a76f80b67 4SHA512 (sudo-1.9.12p1.tar.gz) = 6f564112aa1e0e9cd223adb280bd430d513109c031e52deca308501234dedc0d7418f13cbb9b4249ac58d997cfdae1908c280c26733acbc55dbf9db45dff239a
5Size (sudo-1.9.12.tar.gz) = 4906320 bytes 5Size (sudo-1.9.12p1.tar.gz) = 4908060 bytes
6SHA1 (patch-Makefile.in) = 1a83c55d27829013e2e23073046c5c39b020fafe 6SHA1 (patch-Makefile.in) = 1a83c55d27829013e2e23073046c5c39b020fafe
7SHA1 (patch-configure) = da1f0d89f7dc5d56734fc69f190189ccdfc8b043 7SHA1 (patch-configure) = da1f0d89f7dc5d56734fc69f190189ccdfc8b043
8SHA1 (patch-examples_Makefile.in) = a20967ecd88eb5e4a8b47e6a3b80bc18be713409 8SHA1 (patch-examples_Makefile.in) = a20967ecd88eb5e4a8b47e6a3b80bc18be713409
9SHA1 (patch-lib_logsrv_Makefile.in) = 301c317c806edeee8ce7b44a5431cd38defb3a54 9SHA1 (patch-lib_logsrv_Makefile.in) = 301c317c806edeee8ce7b44a5431cd38defb3a54
10SHA1 (patch-lib_protobuf-c_Makefile.in) = 122e432fb0da36b998778a1b71130f0c3785f575 10SHA1 (patch-lib_protobuf-c_Makefile.in) = 122e432fb0da36b998778a1b71130f0c3785f575
11SHA1 (patch-plugins_sudoers_Makefile.in) = d2981bb9841f6bb4b1c80f5c2f2727fbf9579501 11SHA1 (patch-plugins_sudoers_Makefile.in) = d2981bb9841f6bb4b1c80f5c2f2727fbf9579501
12SHA1 (patch-plugins_sudoers_auth_passwd.c) = 8fc437881e5eedef106037ff746116f8a36889da 
13SHA1 (patch-src_Makefile.in) = 0642684c2d4b3a89259f7d27908f5ec8070969ec 12SHA1 (patch-src_Makefile.in) = 0642684c2d4b3a89259f7d27908f5ec8070969ec
File Deleted: pkgsrc/security/sudo/patches/Attic/patch-plugins_sudoers_auth_passwd.c