Date: Tue, 21 Jun 2005 10:32:31 +0200 From: Anders Nordby <anders@FreeBSD.org> To: mharo@FreeBSD.org Cc: ports@FreeBSD.org Subject: Sudo update Message-ID: <20050621083231.GA95554@totem.fix.no>
next in thread | raw e-mail | index | archive | help
--ZPt4rx8FFjLCG7dd Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Hi, There's a security issue in the sudo version that is in ports, check http://www.sudo.ws/sudo/alerts/path_race.html. Will you update the port soon? Attached is a diff to update the port. Cheers, -- Anders. --ZPt4rx8FFjLCG7dd Content-Type: text/plain; charset=us-ascii Content-Disposition: attachment; filename="sudo.diff" diff -Nur sudo.old/Makefile sudo/Makefile --- sudo.old/Makefile Fri Apr 15 15:06:08 2005 +++ sudo/Makefile Tue Jun 21 08:29:38 2005 @@ -6,7 +6,7 @@ # PORTNAME= sudo -PORTVERSION= 1.6.8.8 +PORTVERSION= 1.6.8.9 PORTREVISION= 0 CATEGORIES= security MASTER_SITES= http://www.sudo.ws/sudo/dist/ \ @@ -19,7 +19,7 @@ http://pluto.cdpa.nsysu.edu.tw/sudo/ \ ftp://ftp.cs.colorado.edu/pub/sysadmin/sudo/ \ ftp://ftp.stikman.com/pub/sudo/ -DISTNAME= ${PORTNAME}-1.6.8p8 +DISTNAME= ${PORTNAME}-1.6.8p9 MAINTAINER= mharo@FreeBSD.org COMMENT= Allow others to run commands as root diff -Nur sudo.old/distinfo sudo/distinfo --- sudo.old/distinfo Fri Apr 15 15:06:08 2005 +++ sudo/distinfo Tue Jun 21 08:29:53 2005 @@ -1,2 +1,2 @@ -MD5 (sudo-1.6.8p8.tar.gz) = 7a60e95d0931dcf3caff7929e974d5cc -SIZE (sudo-1.6.8p8.tar.gz) = 585608 +MD5 (sudo-1.6.8p9.tar.gz) = 6d0346abd16914956bc7ea4f17fc85fb +SIZE (sudo-1.6.8p9.tar.gz) = 585509 --ZPt4rx8FFjLCG7dd--
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050621083231.GA95554>