Compare commits

...
Sign in to create a new pull request.

3 commits

Author SHA1 Message Date
Radovan Sroka
50afd6420a Rabase to 1.9.15p5
- sudo-1_9_15p5 is available
Resolves: rhbz#2248505
- TRIAGE CVE-2023-42465 sudo: Targeted Corruption of Register and Stack
Variables
Resolves: rhbz#2255569

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
2024-01-24 11:13:36 +01:00
Radovan Sroka
600bc7e78a
- migrated to SPDX license
Signed-off-by: Radovan Sroka <rsroka@redhat.com>
2023-06-20 15:59:46 +02:00
Radovan Sroka
f6df47c491
Rebase to sudo 1.9.13p2
- sudo-1.9.13p2 is available
Resolves: rhbz#2169840
- sudo: double free with per-command chroot sudoers rules
Resolves: CVE-2023-27320

Signed-off-by: Radovan Sroka <rsroka@redhat.com>
2023-03-01 17:49:25 +01:00
4 changed files with 7 additions and 14 deletions

4
.gitignore vendored
View file

@ -30,3 +30,7 @@
/sudo-1.9.8p2.tar.gz
/sudo-1.9.11p3.tar.gz
/sudo-1.9.12p2.tar.gz
/sudo-1.9.13p2.tar.gz
/sudo-1.9.14p3.tar.gz
/sudo-1.9.15p4.tar.gz
/sudo-1.9.15p5.tar.gz

View file

@ -1 +1 @@
SHA512 (sudo-1.9.12p2.tar.gz) = 5e035246137d5820691f7ddfc13faec3886e3cf1563ed56633667d86ab4f1306f34cc0e27808f56790b6c6a4614826e54c5b7e47b31eb009b96dde3e52170c45
SHA512 (sudo-1.9.15p5.tar.gz) = ebac69719de2fe7bd587924701bdd24149bf376a68b17ec02f69b2b96d4bb6fa5eb8260a073ec5ea046d3ac69bb5b1c0b9d61709fe6a56f1f66e40817a70b15a

View file

@ -1,11 +0,0 @@
--- sudo-1.6.7p5/scripts/install-sh.strip 2005-07-21 14:28:25.000000000 +0200
+++ sudo-1.6.7p5/scripts/install-sh 2005-07-21 14:29:18.000000000 +0200
@@ -138,7 +138,7 @@
fi
;;
X-s)
- STRIPIT=true
+ #STRIPIT=true
;;
X--)
shift

View file

@ -1,9 +1,9 @@
# comment out if no extra version
%global extraver p2
%global extraver p5
Summary: Allows restricted root access for specified users
Name: sudo
Version: 1.9.12
Version: 1.9.15
# remove -b 3 after rebase !!!
# use "-p -e % {?extraver}" when beta
# use "-e % {?extraver}"" when patch version