From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail02.haj.ipfire.org (localhost [127.0.0.1]) by mail02.haj.ipfire.org (Postfix) with ESMTP id 4bXnPh6shyz2yxl for ; Thu, 3 Jul 2025 06:47:20 +0000 (UTC) Received: from mail01.ipfire.org (mail01.haj.ipfire.org [172.28.1.202]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature ECDSA (secp384r1) client-signature RSA-PSS (4096 bits)) (Client CN "mail01.haj.ipfire.org", Issuer "R11" (verified OK)) by mail02.haj.ipfire.org (Postfix) with ESMTPS id 4bXnPh6l8Qz2ywd for ; Thu, 3 Jul 2025 06:47:20 +0000 (UTC) Received: from people01.haj.ipfire.org (people01.haj.ipfire.org [172.28.1.161]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) client-signature ECDSA (secp384r1)) (Client CN "people01.haj.ipfire.org", Issuer "E6" (verified OK)) by mail01.ipfire.org (Postfix) with ESMTPS id 4bXnPh4JxDzTd for ; Thu, 3 Jul 2025 06:47:20 +0000 (UTC) DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003ed25519; t=1751525240; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=Cr8QWCb7vWYOacw2HvpxTFnMX62Jc2fFtKm0AsSLhHI=; b=6p5/TCpi64AWE6LXKi0duG1LvEqAkp+acFYqTHDn3D/Ft4E6xd5qNCmSBZxC3pbkP6B8tD K+Og8dKzO2CTCNCg== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ipfire.org; s=202003rsa; t=1751525240; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc; bh=Cr8QWCb7vWYOacw2HvpxTFnMX62Jc2fFtKm0AsSLhHI=; b=fKeV0UD4X7hNSJ69Wo0P8dHhK67/we+BCS3LL24oxq0hLFBVk8dhSuI86p2nDHDgMvHJ4g jVuaRPf9p+rIRAEbvmF85PtfCyRQDt76FBM0lIF2OxNCAX+OUg28bLQu1t3Z8abX+spti2 orz00HLRvhoqSEXkGGBsMMQLyI5JztfN71v8CrNBJyzVVC6oYqXacmzUqjfhc6UwTIqHfG idEfqr4S3lRELS51+UuDkSNQ4RESTppr94E4uG7Wbpr9hKvHY3BiYkl8++qiWeo/CRSWQA Dyvd44ygdoXzJSupLTVicGqQwxZqaSmyCUK/yfgF09GFKR+4Z8LzygPx4H/OPg== Received: by people01.haj.ipfire.org (Postfix, from userid 1001) id 4bXnPh3xDdz2xc5; Thu, 3 Jul 2025 06:47:20 +0000 (UTC) To: ipfire-scm@lists.ipfire.org Subject: [git.ipfire.org] IPFire 2.x development tree branch, master, updated. 1f28c8ad6e575c5663f3a4577d24b34a34670c88 X-Git-Refname: refs/heads/master X-Git-Reftype: branch X-Git-Oldrev: 80b5bcd5ed1c3dbad515e0835806999cdbe71e61 X-Git-Newrev: 1f28c8ad6e575c5663f3a4577d24b34a34670c88 Message-Id: <4bXnPh3xDdz2xc5@people01.haj.ipfire.org> Date: Thu, 3 Jul 2025 06:47:20 +0000 (UTC) From: Arne Fitzenreiter Precedence: list List-Id: List-Subscribe: , List-Unsubscribe: , List-Post: List-Help: Sender: Mail-Followup-To: This is an automated email from the git hooks/post-receive script. It was generated because a ref change was pushed to the repository containing the project "IPFire 2.x development tree". The branch, master has been updated via 1f28c8ad6e575c5663f3a4577d24b34a34670c88 (commit) from 80b5bcd5ed1c3dbad515e0835806999cdbe71e61 (commit) Those revisions listed above that are new to this repository have not appeared on any other notification email; so we list those revisions in full, below. - Log ----------------------------------------------------------------- commit 1f28c8ad6e575c5663f3a4577d24b34a34670c88 Author: Adolf Belka Date: Wed Jul 2 13:00:55 2025 +0200 sudo: Update to version 1.9.17p1 - Update from version 1.9.17 to 1.9.17p1 - Update of rootfile not required - Changelog 1.9.17p1 * Fixed CVE-2025-32462. Sudo's -h (--host) option could be specified when running a command or editing a file. This could enable a local privilege escalation attack if the sudoers file allows the user to run commands on a different host. * Fixed CVE-2025-32463. An attacker can leverage sudo's -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file. The chroot support has been deprecated an will be removed entirely in a future release. Signed-off-by: Adolf Belka Signed-off-by: Arne Fitzenreiter ----------------------------------------------------------------------- Summary of changes: lfs/sudo | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) Difference in files: diff --git a/lfs/sudo b/lfs/sudo index 51bf0ada0..c2c221417 100644 --- a/lfs/sudo +++ b/lfs/sudo @@ -24,7 +24,7 @@ include Config -VER = 1.9.17 +VER = 1.9.17p1 THISAPP = sudo-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = d9f2e0d8bca5d5dba5f78a9c064454032038fa60dae022ce72dd0d262bc4bd756fcc5a8e5b0ab4e179c3786fc86a401f7f1ba6d45ca4fe02e43d5cacb1e7f022 +$(DL_FILE)_BLAKE2 = 21771348a8de392767c366bb938951327dcc64a4cedee716a802435899e5135c218468271833a9e3ab9d90bda29e36c0870e27dd333d3a5c64fb8e3a5ebbff58 install : $(TARGET) hooks/post-receive -- IPFire 2.x development tree