[pkgsrc/trunk]: pkgsrc/security/sudo Add a patch for CVE-2005-2959: SHELLOPT...

[cube <cube%pkgsrc.org@localhost>]

details:   https://anonhg.NetBSD.org/pkgsrc/rev/cd9af6b6f450
branches:  trunk
changeset: 501677:cd9af6b6f450
user:      cube <cube%pkgsrc.org@localhost>
date:      Tue Oct 25 22:05:55 2005 +0000

description:
Add a patch for CVE-2005-2959:  SHELLOPTS and PS4 have to be cleared from
the environment before letting the user execute bash scripts.

Bump PKGREVISION.

>From Debian.

diffstat:

 security/sudo/Makefile         |   3 ++-
 security/sudo/distinfo         |   3 ++-
 security/sudo/patches/patch-ah |  13 +++++++++++++
 3 files changed, 17 insertions(+), 2 deletions(-)

diffs (45 lines):

diff -r c9b7a5914365 -r cd9af6b6f450 security/sudo/Makefile
--- a/security/sudo/Makefile    Tue Oct 25 21:41:52 2005 +0000
+++ b/security/sudo/Makefile    Tue Oct 25 22:05:55 2005 +0000
@@ -1,8 +1,9 @@
-# $NetBSD: Makefile,v 1.81 2005/10/07 12:53:02 rillig Exp $
+# $NetBSD: Makefile,v 1.82 2005/10/25 22:05:55 cube Exp $
 #
 
 DISTNAME=              sudo-1.6.8p9
 PKGNAME=               sudo-1.6.8pl9
+PKGREVISION=           1
 CATEGORIES=            security
 MASTER_SITES=          http://www.courtesan.com/sudo/dist/ \
                        ftp://ftp.courtesan.com/pub/sudo/ \
diff -r c9b7a5914365 -r cd9af6b6f450 security/sudo/distinfo
--- a/security/sudo/distinfo    Tue Oct 25 21:41:52 2005 +0000
+++ b/security/sudo/distinfo    Tue Oct 25 22:05:55 2005 +0000
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.30 2005/10/11 01:53:16 riz Exp $
+$NetBSD: distinfo,v 1.31 2005/10/25 22:05:55 cube Exp $
 
 SHA1 (sudo-1.6.8p9.tar.gz) = f264d1ad9f197920f2e69614db7935b35ca51672
 RMD160 (sudo-1.6.8p9.tar.gz) = c1c719504476ab9ac11e0421716d149120463e33
@@ -6,3 +6,4 @@
 SHA1 (patch-aa) = a4f29f2c228eb3b4af0872cf04a00ffdf41c603c
 SHA1 (patch-af) = 245761812dc600b3d2752fa135ba367bb0223370
 SHA1 (patch-ag) = 87c3263674ec98ccc9cc33f2108a2456eddaecc5
+SHA1 (patch-ah) = a08e73c0a20d50a432e01740a9d27b330a1c1998
diff -r c9b7a5914365 -r cd9af6b6f450 security/sudo/patches/patch-ah
--- /dev/null   Thu Jan 01 00:00:00 1970 +0000
+++ b/security/sudo/patches/patch-ah    Tue Oct 25 22:05:55 2005 +0000
@@ -0,0 +1,13 @@
+$NetBSD: patch-ah,v 1.1 2005/10/25 22:05:55 cube Exp $
+
+--- env.c.orig 2005-02-06 16:37:01.000000000 +0100
++++ env.c
+@@ -89,6 +89,8 @@ static char *format_env              __P((char *, ..
+ static const char *initial_badenv_table[] = {
+     "IFS",
+     "CDPATH",
++    "SHELLOPTS",
++    "PS4",
+     "LOCALDOMAIN",
+     "RES_OPTIONS",
+     "HOSTALIASES",