CVS commit: [pkgsrc-2014Q4] pkgsrc/security/sudo

["Matthias Scheler" <tron%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   tron
Date:           Sat Feb 14 09:31:17 UTC 2015

Modified Files:
        pkgsrc/security/sudo [pkgsrc-2014Q4]: Makefile distinfo

Log Message:
Pullup ticket #4612 - requested by spz
security/sudo: security update

Revisions pulled up:
- security/sudo/Makefile                                        1.145
- security/sudo/distinfo                                        1.82

---
   Module Name: pkgsrc
   Committed By:        spz
   Date:                Wed Feb 11 09:11:59 UTC 2015

   Modified Files:
        pkgsrc/security/sudo: Makefile distinfo

   Log Message:
   update of sudo to the next upstream patch version (1.7.10p8 to 1.7.10p9)

   Upstream Changelog:

   +   The TZ environment variable is now checked for safety instead of
       simply being copied to the environment of the command.
       This fixes a potential security issue.

   +   Sudo now only builds Position Independent Executables (PIE) by
       default on Linux systems and verifies that a trivial test program
       builds and runs.

   +   On Solaris 11.1 and higher, sudo binaries will now have the ASLR tag
       enabled if supported by the linker.


To generate a diff of this commit:
cvs rdiff -u -r1.144 -r1.144.2.1 pkgsrc/security/sudo/Makefile
cvs rdiff -u -r1.81 -r1.81.8.1 pkgsrc/security/sudo/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.