CVS commit: [pkgsrc-2022Q4] pkgsrc/security/sudo

["S.P.Zeidler" <spz%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   spz
Date:           Sun Feb 12 19:28:57 UTC 2023

Modified Files:
        pkgsrc/security/sudo [pkgsrc-2022Q4]: Makefile distinfo

Log Message:
Pullup ticket #6735 - requested by taca
security/sudo: security update

Revisions pulled up:
- security/sudo/Makefile                                        1.194
- security/sudo/distinfo                                        1.126

-------------------------------------------------------------------
   Module Name: pkgsrc
   Committed By:        taca
   Date:                Mon Feb  6 14:35:32 UTC 2023

   Modified Files:
        pkgsrc/security/sudo: Makefile distinfo

   Log Message:
   security/sudo: update to 1.9.12p2

   1.9.12.p2 (2023-01-18)

    * Fixed a compilation error on Linux/aarch64.  GitHub issue #197.

    * Fixed a potential crash introduced in the fix for GitHub issue #134.
      If a user's sudoers entry did not have any RunAs user's set,
      running "sudo -U otheruser -l" would dereference a NULL pointer.

    * Fixed a bug introduced in sudo 1.9.12 that could prevent sudo
      from creating a I/O files when the "iolog_file" sudoers setting
      contains six or more Xs.

    * Fixed CVE-2023-22809, a flaw in sudo's -e option (aka sudoedit)
      that coud allow a malicious user with sudoedit privileges to
      edit arbitrary files.

   To generate a diff of this commit:
   cvs rdiff -u -r1.193 -r1.194 pkgsrc/security/sudo/Makefile
   cvs rdiff -u -r1.125 -r1.126 pkgsrc/security/sudo/distinfo


To generate a diff of this commit:
cvs rdiff -u -r1.193 -r1.193.2.1 pkgsrc/security/sudo/Makefile
cvs rdiff -u -r1.125 -r1.125.2.1 pkgsrc/security/sudo/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/security/sudo/Makefile
diff -u pkgsrc/security/sudo/Makefile:1.193 pkgsrc/security/sudo/Makefile:1.193.2.1
--- pkgsrc/security/sudo/Makefile:1.193 Mon Nov  7 14:26:57 2022
+++ pkgsrc/security/sudo/Makefile       Sun Feb 12 19:28:57 2023
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.193 2022/11/07 14:26:57 taca Exp $
+# $NetBSD: Makefile,v 1.193.2.1 2023/02/12 19:28:57 spz Exp $
 
-DISTNAME=      sudo-1.9.12p1
+DISTNAME=      sudo-1.9.12p2
 CATEGORIES=    security
 MASTER_SITES=  https://www.sudo.ws/dist/
 MASTER_SITES+= ftp://ftp.sudo.ws/pub/sudo/

Index: pkgsrc/security/sudo/distinfo
diff -u pkgsrc/security/sudo/distinfo:1.125 pkgsrc/security/sudo/distinfo:1.125.2.1
--- pkgsrc/security/sudo/distinfo:1.125 Mon Nov  7 14:26:57 2022
+++ pkgsrc/security/sudo/distinfo       Sun Feb 12 19:28:57 2023
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.125 2022/11/07 14:26:57 taca Exp $
+$NetBSD: distinfo,v 1.125.2.1 2023/02/12 19:28:57 spz Exp $
 
-BLAKE2s (sudo-1.9.12p1.tar.gz) = c7f87e66e9cfa2c3fc09e84950c9e3b5c4ad5a0428ffb84e9308de67ed6be4f5
-SHA512 (sudo-1.9.12p1.tar.gz) = 6f564112aa1e0e9cd223adb280bd430d513109c031e52deca308501234dedc0d7418f13cbb9b4249ac58d997cfdae1908c280c26733acbc55dbf9db45dff239a
-Size (sudo-1.9.12p1.tar.gz) = 4908060 bytes
+BLAKE2s (sudo-1.9.12p2.tar.gz) = cb2f434ec3754978898471bba89a2f4ffa8e342ab9d8ad4b8a32995fb0c53f37
+SHA512 (sudo-1.9.12p2.tar.gz) = 5e035246137d5820691f7ddfc13faec3886e3cf1563ed56633667d86ab4f1306f34cc0e27808f56790b6c6a4614826e54c5b7e47b31eb009b96dde3e52170c45
+Size (sudo-1.9.12p2.tar.gz) = 4909431 bytes
 SHA1 (patch-Makefile.in) = 1a83c55d27829013e2e23073046c5c39b020fafe
 SHA1 (patch-configure) = da1f0d89f7dc5d56734fc69f190189ccdfc8b043
 SHA1 (patch-examples_Makefile.in) = a20967ecd88eb5e4a8b47e6a3b80bc18be713409