From mboxrd@z Thu Jan 1 00:00:00 1970 From: Adolf Belka To: development@lists.ipfire.org Subject: [PATCH] sudo: Update to 1.9.7 Date: Sat, 15 May 2021 23:49:32 +0200 Message-ID: <20210515214932.4133479-1-adolf.belka@ipfire.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============3480515700677531981==" List-Id: --===============3480515700677531981== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable - Update from 1.9.6p1 to 1.9.7 - Update of rootfile not required - Changelog The fuzz Makefile target now runs all the fuzzers for 8192 passes (can be= overridden via the FUZZ_RUNS variable). This makes it easier to run the fuzz= ers in-tree. To run a fuzzer indefinitely, set FUZZ_RUNS=3D-1, e.g. make FUZZ= _RUNS=3D-1 fuzz. Fixed fuzzing on FreeBSD where the ld.lld linker returns an error by defa= ult when a symbol is multiply-defined. Added support for determining local IPv6 addresses on systems that lack t= he getifaddrs() function. This now works on AIX, HP-UX and Solaris (at least)= . Bug #969. Fixed a bug introduced in sudo 1.9.6 that caused sudo -V to report a usag= e error. Also, when invoked as sudoedit, sudo now allows a more restricted se= t of options that matches the usage statement and documentation. GitHub Issue= #95. Fixed a crash in sudo_sendlog when the specified certificate or key does = not exist or is invalid. Bug #970. Fixed a compilation error when sudo is configured with the disable-log-cl= ientoption. Sudo's limited support for SUCCESS=3Dreturn entries in nsswitch.conf is n= ow documented. Bug #971. Sudo now requires autoconf 2.70 or higher to regenerate the configure scr= ipt. Bug #972. sudo_logsrvd now has a relay mode which can be used to create a hierarchy= of log servers. By default, when a relay server is defined, messages from th= e client are forwarded immediately to the relay. However, if the store_first = setting is enabled, the log will be stored locally until the command complete= s and then relayed. Bug #965. Sudo now links with OpenSSL by default if it is available unless the --di= sable-openssl configure option is used or both the --disable-log-client and -= -disable-log-server configure options are specified. Fixed configure's Python version detection when the version minor number = is more than a single digit, for example Python 3.10. The sudo Python module tests now pass for Python 3.10. Sudo will now avoid changing the datasize resource limit as long as the e= xisting value is at least 1GB. This works around a problem on 64-bit HP-UX wh= ere it is not possible to exactly restore the original datasize limit. Bug #9= 73. Fixed a race condition that could result in a hang when sudo is executed = by a process where the SIGCHLD handler is set to SIG_IGN. This fixes the bug = described by GitHub PR #98. Fixed an out-of-bounds read in sudoedit and visudo when the EDITOR, VISUA= L or SUDO_EDITOR environment variables end in an unescaped backslash. Also fi= xed the handling of quote characters that are escaped by a backslash. GitHub = Issue #99. Fixed a bug that prevented the log_server_verify sudoers option from taki= ng effect. The sudo_sendlog utility has a new -s option to cause it to stop sending = I/O records after a user-specified elapsed time. This can be used to test the= I/O log restart functionality of sudo_logsrvd. Fixed a crash introduced in sudo 1.9.4 in sudo_logsrvd when attempting to= restart an interrupted I/O log transfer. The TLS connection timeout in the sudoers log client was previously hard-= coded to 10 seconds. It now uses the value of log_server_timeout. The configure script now outputs a summary of the user-configurable optio= ns at the end, separate from output of configure script tests. Bug #820. Corrected the description of which groups may be specified via the -g opt= ion in the Runas_Spec section. Bug #975. Signed-off-by: Adolf Belka --- lfs/sudo | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/lfs/sudo b/lfs/sudo index 6c09fac10..ab6fbf99b 100644 --- a/lfs/sudo +++ b/lfs/sudo @@ -24,7 +24,7 @@ =20 include Config =20 -VER =3D 1.9.6p1 +VER =3D 1.9.7 =20 THISAPP =3D sudo-$(VER) DL_FILE =3D $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects =3D $(DL_FILE) =20 $(DL_FILE) =3D $(DL_FROM)/$(DL_FILE) =20 -$(DL_FILE)_MD5 =3D 334f8337d497f2f5df2db72448bd259d +$(DL_FILE)_MD5 =3D 1ed8b73ba56c9b05ed22681b7b92d1b2 =20 install : $(TARGET) =20 --=20 2.31.1 --===============3480515700677531981==--