From owner-freebsd-ports@FreeBSD.ORG Tue Jun 21 10:24:36 2005 Return-Path: X-Original-To: ports@FreeBSD.org Delivered-To: freebsd-ports@FreeBSD.ORG Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5E4F616A41C; Tue, 21 Jun 2005 10:24:36 +0000 (GMT) (envelope-from vd@datamax.bg) Received: from jengal.datamax.bg (jengal.datamax.bg [82.103.104.21]) by mx1.FreeBSD.org (Postfix) with ESMTP id 11C7E43D5D; Tue, 21 Jun 2005 10:24:35 +0000 (GMT) (envelope-from vd@datamax.bg) Received: from sinanica.bg.datamax (sinanica.bg.datamax [192.168.10.1]) by jengal.datamax.bg (Postfix) with QMQP id F109387EC; Tue, 21 Jun 2005 13:24:33 +0300 (EEST) Received: (nullmailer pid 42217 invoked by uid 1004); Tue, 21 Jun 2005 10:24:33 -0000 Date: Tue, 21 Jun 2005 13:24:33 +0300 From: Vasil Dimov To: Anders Nordby , ports@FreeBSD.org Message-ID: <20050621102433.GB42006@sinanica.bg.datamax> References: <20050621083231.GA95554@totem.fix.no> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="/04w6evG8XlLl3ft" Content-Disposition: inline In-Reply-To: <20050621083231.GA95554@totem.fix.no> X-OS: FreeBSD 5.4-STABLE User-Agent: Mutt/1.5.9i Cc: Subject: Re: Sudo update X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: vd@datamax.bg List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 21 Jun 2005 10:24:36 -0000 --/04w6evG8XlLl3ft Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Tue, Jun 21, 2005 at 10:32:31AM +0200, Anders Nordby wrote: > Hi, >=20 > There's a security issue in the sudo version that is in ports, check > http://www.sudo.ws/sudo/alerts/path_race.html. Will you update the port > soon? >=20 > Attached is a diff to update the port. >=20 > Cheers, >=20 > --=20 > Anders. Maybe it would be better to submit a PR for this. --/04w6evG8XlLl3ft Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- iD8DBQFCt+rhFw6SP/bBpCARAjbNAJ0Q2v3wXbSBPFNOGz0vAeTUlACv5QCffoGb V8RwzqePuSej05eG8qll8eI= =v9CV -----END PGP SIGNATURE----- --/04w6evG8XlLl3ft--