]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core.git/commit
sudo: upgrade 1.9.12p1 -> 1.9.12p2
authorAlexander Kanavin <alex.kanavin@gmail.com>
Wed, 8 Feb 2023 07:21:38 +0000 (08:21 +0100)
committerSteve Sakoman <steve@sakoman.com>
Sat, 18 Feb 2023 16:41:49 +0000 (06:41 -1000)
commit9f01e75b2d249a5885b313bcb4ba76df750b0d56
tree525d43e0fe7f47ad6ee269c8c2b06f4909ab47ff
parent936354cade974b59b964ea55aca22a04fa44a2a5
sudo: upgrade 1.9.12p1 -> 1.9.12p2

Changes:

Fixed a compilation error on Linux/aarch64. GitHub issue #197.

Fixed a potential crash introduced in the fix GitHub issue #134. If a user’s sudoers entry did not have any RunAs user’s set, running sudo -U otheruser -l would dereference a NULL pointer.

Fixed a bug introduced in sudo 1.9.12 that could prevent sudo from creating a I/O files when the iolog_file sudoers setting contains six or more Xs.

Fixed a compilation issue on AIX with the native compiler. GitHub issue #231.

Fixed CVE-2023-22809, a flaw in sudo’s -e option (aka sudoedit) that could allow a malicious user with sudoedit privileges to edit arbitrary files

Signed-off-by: Alexander Kanavin <alex@linutronix.de>
Signed-off-by: Luca Ceresoli <luca.ceresoli@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
(cherry picked from commit 5a3f5f4f607f5e06af772287109b68579154fb2f)
Signed-off-by: Steve Sakoman <steve@sakoman.com>
meta/recipes-extended/sudo/sudo_1.9.12p2.bb [moved from meta/recipes-extended/sudo/sudo_1.9.12p1.bb with 96% similarity]