[pkgsrc/trunk]: pkgsrc Security update for security/sudo to 1.6.8p9. Changes...

[jlam <jlam%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/e23d4f350819
branches:  trunk
changeset: 495795:e23d4f350819
user:      jlam <jlam%pkgsrc.org@localhost>
date:      Mon Jun 20 20:11:11 2005 +0000

description:
Security update for security/sudo to 1.6.8p9.  Changes from version
1.6.8p7 include:

562) Fixed noexec functionality on Linux.

564) Fixed a bug that prevented Heimdal authentication from working.

566) A sudoers entry with sudo ALL no longer overwrites the value of
     safe_cmnd.  This fixes the privilege escalation vulnerability
     noted in http://www.courtesan.com/sudo/alerts/path_race.html

diffstat:

 doc/CHANGES            |  3 ++-
 security/sudo/Makefile |  6 +++---
 security/sudo/distinfo |  8 ++++----
 3 files changed, 9 insertions(+), 8 deletions(-)

diffs (45 lines):

diff -r 5b13b7643cd9 -r e23d4f350819 doc/CHANGES
--- a/doc/CHANGES       Mon Jun 20 19:22:34 2005 +0000
+++ b/doc/CHANGES       Mon Jun 20 20:11:11 2005 +0000
@@ -1,4 +1,4 @@
-$NetBSD: CHANGES,v 1.10398 2005/06/20 19:22:34 epg Exp $
+$NetBSD: CHANGES,v 1.10399 2005/06/20 20:11:13 jlam Exp $
 
 Changes to the packages collection and infrastructure in 2005:
        
@@ -2930,3 +2930,4 @@
        Updated security/audit-packages to 1.37 [tron 2005-06-20]
        Updated security/heimdal to 0.6.5 [lha 2005-06-20]
        Updated www/trac to 0.8.4 [epg 2005-06-20]
+       Updated security/sudo to 1.6.8pl9 [jlam 2005-06-20]
diff -r 5b13b7643cd9 -r e23d4f350819 security/sudo/Makefile
--- a/security/sudo/Makefile    Mon Jun 20 19:22:34 2005 +0000
+++ b/security/sudo/Makefile    Mon Jun 20 20:11:11 2005 +0000
@@ -1,8 +1,8 @@
-# $NetBSD: Makefile,v 1.79 2005/04/11 21:47:20 tv Exp $
+# $NetBSD: Makefile,v 1.80 2005/06/20 20:11:11 jlam Exp $
 #
 
-DISTNAME=              sudo-1.6.8p7
-PKGNAME=               sudo-1.6.8pl7
+DISTNAME=              sudo-1.6.8p9
+PKGNAME=               sudo-1.6.8pl9
 PKGREVISION=           # empty
 CATEGORIES=            security
 MASTER_SITES=          http://www.courtesan.com/sudo/dist/ \
diff -r 5b13b7643cd9 -r e23d4f350819 security/sudo/distinfo
--- a/security/sudo/distinfo    Mon Jun 20 19:22:34 2005 +0000
+++ b/security/sudo/distinfo    Mon Jun 20 20:11:11 2005 +0000
@@ -1,8 +1,8 @@
-$NetBSD: distinfo,v 1.28 2005/03/30 12:08:15 cube Exp $
+$NetBSD: distinfo,v 1.29 2005/06/20 20:11:11 jlam Exp $
 
-SHA1 (sudo-1.6.8p7.tar.gz) = 769d34989d8f992eda3cfbddf586bd4f0f5d3dac
-RMD160 (sudo-1.6.8p7.tar.gz) = a2fefd369b8c20a989e084d8432f5ac3b03196b3
-Size (sudo-1.6.8p7.tar.gz) = 585302 bytes
+SHA1 (sudo-1.6.8p9.tar.gz) = f264d1ad9f197920f2e69614db7935b35ca51672
+RMD160 (sudo-1.6.8p9.tar.gz) = c1c719504476ab9ac11e0421716d149120463e33
+Size (sudo-1.6.8p9.tar.gz) = 585509 bytes
 SHA1 (patch-aa) = a4f29f2c228eb3b4af0872cf04a00ffdf41c603c
 SHA1 (patch-af) = 870a0f0504449dbb839c8b8c2dfe6505a9c9ec68
 SHA1 (patch-ag) = 3703932e134ae90281179d0a4ae4760fa420264b