Date: Wed, 18 Jan 2023 17:08:55 GMT From: Cy Schubert <cy@FreeBSD.org> To: ports-committers@FreeBSD.org, dev-commits-ports-all@FreeBSD.org, dev-commits-ports-main@FreeBSD.org Subject: git: 8f8bd813f313 - main - security/sudo: Update to 1.9.12p2 Message-ID: <202301181708.30IH8tmS096834@gitrepo.freebsd.org>
next in thread | raw e-mail | index | archive | help
The branch main has been updated by cy: URL: https://cgit.FreeBSD.org/ports/commit/?id=8f8bd813f3139d6f6ff35704808111c4ad1f053a commit 8f8bd813f3139d6f6ff35704808111c4ad1f053a Author: Cy Schubert <cy@FreeBSD.org> AuthorDate: 2023-01-18 16:20:58 +0000 Commit: Cy Schubert <cy@FreeBSD.org> CommitDate: 2023-01-18 17:08:35 +0000 security/sudo: Update to 1.9.12p2 Major changes between sudo 1.9.12p2 and 1.9.12p1: * Fixed a compilation error on Linux/aarch64. GitHub issue #197. * Fixed a potential crash introduced in the fix for GitHub issue #134. If a user's sudoers entry did not have any RunAs user's set, running "sudo -U otheruser -l" would dereference a NULL pointer. * Fixed a bug introduced in sudo 1.9.12 that could prevent sudo from creating a I/O files when the "iolog_file" sudoers setting contains six or more Xs. * Fixed CVE-2023-22809, a flaw in sudo's -e option (aka sudoedit) that coud allow a malicious user with sudoedit privileges to edit arbitrary files. PR: 269030 Submitted by: cy Reported by: cy Approved by: garga MFH: 2023Q1 Security: CVE-2023-22809 --- security/sudo/Makefile | 2 +- security/sudo/distinfo | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/security/sudo/Makefile b/security/sudo/Makefile index 7318f194b669..673b94caf04f 100644 --- a/security/sudo/Makefile +++ b/security/sudo/Makefile @@ -1,5 +1,5 @@ PORTNAME= sudo -PORTVERSION= 1.9.12p1 +PORTVERSION= 1.9.12p2 CATEGORIES= security MASTER_SITES= SUDO diff --git a/security/sudo/distinfo b/security/sudo/distinfo index 909e14ed47f8..1820b31e549f 100644 --- a/security/sudo/distinfo +++ b/security/sudo/distinfo @@ -1,3 +1,3 @@ -TIMESTAMP = 1667830579 -SHA256 (sudo-1.9.12p1.tar.gz) = 475a18a8eb3da8b2917ceab063a6baf51ea09128c3c47e3e0e33ab7497bab7d8 -SIZE (sudo-1.9.12p1.tar.gz) = 4908060 +TIMESTAMP = 1674058310 +SHA256 (sudo-1.9.12p2.tar.gz) = b9a0b1ae0f1ddd9be7f3eafe70be05ee81f572f6f536632c44cd4101bb2a8539 +SIZE (sudo-1.9.12p2.tar.gz) = 4909431
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202301181708.30IH8tmS096834>