[pkgsrc/trunk]: pkgsrc/security/sudo Update sudo to nb2 to address the recent...

[adrianp <adrianp%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/ae44c82b6f94
branches:  trunk
changeset: 503002:ae44c82b6f94
user:      adrianp <adrianp%pkgsrc.org@localhost>
date:      Sat Nov 12 14:17:45 2005 +0000

description:
Update sudo to nb2 to address the recent secuity issue:
- http://www.sudo.ws/sudo/alerts/perl_env.html

- Add "PERLLIB", "PERL5LIB" and the "PERL5OPT" to the list of
  environment variables to be cleaned.

diffstat:

 security/sudo/Makefile         |   4 ++--
 security/sudo/distinfo         |   4 ++--
 security/sudo/patches/patch-ah |  14 ++++++++++++--
 3 files changed, 16 insertions(+), 6 deletions(-)

diffs (56 lines):

diff -r aabdea19f511 -r ae44c82b6f94 security/sudo/Makefile
--- a/security/sudo/Makefile    Sat Nov 12 13:59:28 2005 +0000
+++ b/security/sudo/Makefile    Sat Nov 12 14:17:45 2005 +0000
@@ -1,9 +1,9 @@
-# $NetBSD: Makefile,v 1.82 2005/10/25 22:05:55 cube Exp $
+# $NetBSD: Makefile,v 1.83 2005/11/12 14:17:45 adrianp Exp $
 #
 
 DISTNAME=              sudo-1.6.8p9
 PKGNAME=               sudo-1.6.8pl9
-PKGREVISION=           1
+PKGREVISION=           2
 CATEGORIES=            security
 MASTER_SITES=          http://www.courtesan.com/sudo/dist/ \
                        ftp://ftp.courtesan.com/pub/sudo/ \
diff -r aabdea19f511 -r ae44c82b6f94 security/sudo/distinfo
--- a/security/sudo/distinfo    Sat Nov 12 13:59:28 2005 +0000
+++ b/security/sudo/distinfo    Sat Nov 12 14:17:45 2005 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.31 2005/10/25 22:05:55 cube Exp $
+$NetBSD: distinfo,v 1.32 2005/11/12 14:17:45 adrianp Exp $
 
 SHA1 (sudo-1.6.8p9.tar.gz) = f264d1ad9f197920f2e69614db7935b35ca51672
 RMD160 (sudo-1.6.8p9.tar.gz) = c1c719504476ab9ac11e0421716d149120463e33
@@ -6,4 +6,4 @@
 SHA1 (patch-aa) = a4f29f2c228eb3b4af0872cf04a00ffdf41c603c
 SHA1 (patch-af) = 245761812dc600b3d2752fa135ba367bb0223370
 SHA1 (patch-ag) = 87c3263674ec98ccc9cc33f2108a2456eddaecc5
-SHA1 (patch-ah) = a08e73c0a20d50a432e01740a9d27b330a1c1998
+SHA1 (patch-ah) = 6210bca36fa7fc87ef179b7bf92109828390bea0
diff -r aabdea19f511 -r ae44c82b6f94 security/sudo/patches/patch-ah
--- a/security/sudo/patches/patch-ah    Sat Nov 12 13:59:28 2005 +0000
+++ b/security/sudo/patches/patch-ah    Sat Nov 12 14:17:45 2005 +0000
@@ -1,6 +1,6 @@
-$NetBSD: patch-ah,v 1.1 2005/10/25 22:05:55 cube Exp $
+$NetBSD: patch-ah,v 1.2 2005/11/12 14:17:46 adrianp Exp $
 
---- env.c.orig 2005-02-06 16:37:01.000000000 +0100
+--- env.c.orig 2005-02-06 15:37:01.000000000 +0000
 +++ env.c
 @@ -89,6 +89,8 @@ static char *format_env              __P((char *, ..
  static const char *initial_badenv_table[] = {
@@ -11,3 +11,13 @@
      "LOCALDOMAIN",
      "RES_OPTIONS",
      "HOSTALIASES",
+@@ -124,6 +126,9 @@ static const char *initial_badenv_table[
+     "TERMCAP",                        /* XXX - only if it starts with '/' */
+     "ENV",
+     "BASH_ENV",
++    "PERLLIB",
++    "PERL5LIB",
++    "PERL5OPT",
+     NULL
+ };
+