From nobody Wed Jun 22 14:04:08 2022 X-Original-To: dev-commits-ports-branches@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id E6A5186BDE5; Wed, 22 Jun 2022 14:04:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256 client-signature RSA-PSS (4096 bits) client-digest SHA256) (Client CN "mxrelay.nyi.freebsd.org", Issuer "R3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4LSlVc4XHDz3r8T; Wed, 22 Jun 2022 14:04:08 +0000 (UTC) (envelope-from git@FreeBSD.org) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1655906648; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=LYg5MCkw2fDbvc+SGrTRV7k2wpP1z4cRA35/l5N/2Bc=; b=dYv8wI0BIBcCEZLsRXYSMhpwnAB8bYmpHwOCK9T8oB6vaNU6CXhFGtofzTPhDc1rqo3V2e 0nZzIaPeikzHWIA+VjzY/DetbgJyLLYosi23zsjfA9JAhWUNwQ+FsSrFK2z9Ne52JN3bMK gaNT/vpHPB+tYzbBZkp6I2QI2b7s86DeSSmA3XC7K2f0pXbWT8Np1xlxkz69IPToh6Ef+z nLED6jyftGnStfQspRIJG/5gzO/xhhbPJpLg1dRkDdtTZ2tiYjPIc8WCmxBbKVX94gBSvU c4c20DKfmV/27R3H9PhMubhLfc1okBnIKBz7JpJNHVbqR2YYK6/YvsfRLw7tjQ== Received: from gitrepo.freebsd.org (gitrepo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:5]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 5E50427446; Wed, 22 Jun 2022 14:04:08 +0000 (UTC) (envelope-from git@FreeBSD.org) Received: from gitrepo.freebsd.org ([127.0.1.44]) by gitrepo.freebsd.org (8.16.1/8.16.1) with ESMTP id 25ME48Do016065; Wed, 22 Jun 2022 14:04:08 GMT (envelope-from git@gitrepo.freebsd.org) Received: (from git@localhost) by gitrepo.freebsd.org (8.16.1/8.16.1/Submit) id 25ME48Ue016064; Wed, 22 Jun 2022 14:04:08 GMT (envelope-from git) Date: Wed, 22 Jun 2022 14:04:08 GMT Message-Id: <202206221404.25ME48Ue016064@gitrepo.freebsd.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-branches@FreeBSD.org From: Renato Botelho Subject: git: c88d2f344aca - 2022Q2 - security/sudo: Update to 1.9.11p1 List-Id: Commits to the quarterly branches of the FreeBSD ports repository List-Archive: https://lists.freebsd.org/archives/dev-commits-ports-branches List-Help: List-Post: List-Subscribe: List-Unsubscribe: Sender: owner-dev-commits-ports-branches@freebsd.org X-BeenThere: dev-commits-ports-branches@freebsd.org MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 8bit X-Git-Committer: garga X-Git-Repository: ports X-Git-Refname: refs/heads/2022Q2 X-Git-Reftype: branch X-Git-Commit: c88d2f344aca4f4452ae67b42218a12142b0f8be Auto-Submitted: auto-generated ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=freebsd.org; s=dkim; t=1655906648; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=LYg5MCkw2fDbvc+SGrTRV7k2wpP1z4cRA35/l5N/2Bc=; b=TXDPzPQ/+8pG1eU+K2RSoL4J282H81XjJNuaAUv7UggW9UQzYNqxnRtd5nMAEweCWOcwIp FMA7/CbcTqVLl9Hw8flVcRoYLR9qbQoYZCCbcyOVufuDoAfMR0FxBA1UhDX9LfOKaZC0vg 2zDFZeGdoTXaJWlDRJbOabkYXqvTfcNeb2H7iOp5nyXFcOmFCqNTnqvgHq9e4c9N+az6PO N0lhAlA9LlJA5V91Nanyfi+1b3SlwFMZrMiFIF91n5CqG8Ux1WF1okE74huTPL75eO9Llo OTeZSu4FAraoxIsoCBIAarfzM2Elrj+dliGUPb9bsyOkFpSrtfJIxnjKqTX7Mw== ARC-Seal: i=1; s=dkim; d=freebsd.org; t=1655906648; a=rsa-sha256; cv=none; b=Bi+y++aTlsTNb7QOhxjt/NVD97HU7f1t3R2bn23uwuBYTynEc0Wo8dIrrEaI1XglcI2by2 m91iHwzVyGksiaGknkKfZOG3pnFt0chA17A49wAInC/vxQkSBsFO1T2vfKMVanQNtqi8qX iWUIamVaETdkpqJ2bqI38N5pdYY8vncETf8KBFCizAJmSB3aRBmkxNMet2litS7f+CgDXT j4qH2N1J5Z34OqPleNixR532N04ZO88ke2q/VSyk1UeL82o+okv9QJbjwnc0Fh13ukELiV +v56Zq42WcBGqjYV4RNdxjC+s5/zXB5On/MsLn55d41Kff8E7n8qlmBgPVA28g== ARC-Authentication-Results: i=1; mx1.freebsd.org; none X-ThisMailContainsUnwantedMimeParts: N The branch 2022Q2 has been updated by garga: URL: https://cgit.FreeBSD.org/ports/commit/?id=c88d2f344aca4f4452ae67b42218a12142b0f8be commit c88d2f344aca4f4452ae67b42218a12142b0f8be Author: Cy Schubert AuthorDate: 2022-06-08 19:45:48 +0000 Commit: Renato Botelho CommitDate: 2022-06-22 14:03:15 +0000 security/sudo: Update to 1.9.11p1 Major changes between sudo 1.9.11p1 and 1.9.11: * Correctly handle EAGAIN in the I/O read/right events. This fixes a hang seen on some systems when piping a large amount of data through sudo, such as via rsync. Bug #963. * Changes to avoid implementation or unspecified behavior when bit shifting signed values in the protobuf library. * Fixed a compilation error on Linux/aarch64. * Fixed the configure check for seccomp(2) support on Linux. * Corrected the EBNF specification for tags in the sudoers manual page. GitHub issue #153. Major changes between sudo 1.9.11 and 1.9.10: * Fixed a crash in the Python module with Python 3.9.10 on some systems. Additionally, "make check" now passes for Python 3.9.10. * Error messages sent via email now include more details, including the file name and the line number and column of the error. Multiple errors are sent in a single message. Previously, only the first error was included. * Fixed logging of parse errors in JSON format. Previously, the JSON logger would not write entries unless the command and runuser were set. These may not be known at the time a parse error is encountered. * Fixed a potential crash parsing sudoers lines larger than twice the value of LINE_MAX on systems that lack the getdelim() function. * The tests run by "make check" now unset the LANGUAGE environment variable. Otherwise, localization strings will not match if LANGUAGE is set to a non-English locale. Bug #1025. * The "starttime" test now passed when run under Debian faketime. Bug #1026. * The Kerberos authentication module now honors the custom password prompt if one has been specified. * The embedded copy of zlib has been updated to version 1.2.12. * Updated the version of libtool used by sudo to version 2.4.7. * Sudo now defines _TIME_BITS to 64 on systems that define __TIMESIZE in the header files (currently only GNU libc). This is required to allow the use of 64-bit time values on some 32-bit systems. * Sudo's "intercept" and "log_subcmds" options no longer force the command to run in its own pseudo-terminal. It is now also possible to intercept the system(3) function. * Fixed a bug in sudo_logsrvd when run in store-first relay mode where the commit point messages sent by the server were incorrect if the command was suspended or received a window size change event. * Fixed a potential crash in sudo_logsrvd when the "tls_dhparams" configuration setting was used. * The "intercept" and "log_subcmds" functionality can now use ptrace(2) on Linux systems that support seccomp(2) filtering. This has the advantage of working for both static and dynamic binaries and can work with sudo's SELinux RBAC mode. The following architectures are currently supported: i386, x86_64, aarch64, arm, mips (log_subcmds only), powerpc, riscv, and s390x. The default is to use ptrace(2) where possible; the new "intercept_type" sudoers setting can be used to explicitly set the type. * New Georgian translation from translationproject.org. * Fixed creating packages on CentOS Stream. * Fixed a bug in the intercept and log_subcmds support where the execve(2) wrapper was using the current environment instead of the passed environment pointer. Bug #1030. * Added AppArmor integration for Linux. A sudoers rule can now specify an APPARMOR_PROFILE option to run a command confined by the named AppArmor profile. * Fixed parsing of the "server_log" setting in sudo_logsrvd.conf. Non-paths were being treated as paths and an actual path was treated as an error. PR: 264554 Approved by: garga (maintainer) (cherry picked from commit 7e42695954c2c1fe0ecdc9ff98323d1a6e9a53f0) --- security/sudo/Makefile | 2 +- security/sudo/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/security/sudo/Makefile b/security/sudo/Makefile index 32b71421d363..82333a420c6d 100644 --- a/security/sudo/Makefile +++ b/security/sudo/Makefile @@ -1,7 +1,7 @@ # Created by: erich@rrnet.com PORTNAME= sudo -PORTVERSION= 1.9.11 +PORTVERSION= 1.9.11p1 CATEGORIES= security MASTER_SITES= SUDO diff --git a/security/sudo/distinfo b/security/sudo/distinfo index f53f26673ed0..441a89de2330 100644 --- a/security/sudo/distinfo +++ b/security/sudo/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1654573243 -SHA256 (sudo-1.9.11.tar.gz) = b5476e30d83ca14734da9370f2206beb21c8a33fc85a504fb8a61d18d8b351be -SIZE (sudo-1.9.11.tar.gz) = 4822882 +TIMESTAMP = 1654717240 +SHA256 (sudo-1.9.11p1.tar.gz) = eb8b6c1a69a9adf4b82030b66d99d79214d7cba5031a0be43103a6176b16254b +SIZE (sudo-1.9.11p1.tar.gz) = 4825102