Bug 269854 - security/sudo - Update to 1.9.13p2
Summary: security/sudo - Update to 1.9.13p2
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: --- Affects Only Me
Assignee: Cy Schubert
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2023-02-27 18:07 UTC by Cy Schubert
Modified: 2023-03-02 04:01 UTC (History)
1 user (show)

See Also:
garga: maintainer-feedback+
cy: merge-quarterly?

Attachments
Update sudo to 1.9.13p2 (1.43 KB, patch)
2023-02-27 18:07 UTC, Cy Schubert 		no flags Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Cy Schubert freebsd_committer freebsd_triage 2023-02-27 18:07:20 UTC 
Created attachment 240456 [details]
Update sudo to 1.9.13p2

Major changes between sudo 1.9.13p2 and 1.9.13p1:

 * Fixed the --enable-static-sudoers option, broken in sudo 1.9.13.
   GitHub issue #245.

 * Fixed a potential double-free bug when matching a sudoers rule
   that contains a per-command chroot directive (CHROOT=dir).  This
   bug was introduced in sudo 1.9.8.
Comment 1 Renato Botelho freebsd_committer freebsd_triage 2023-02-27 19:06:50 UTC 
Approved.  Thanks!
Comment 2 commit-hook freebsd_committer freebsd_triage 2023-03-01 23:59:41 UTC 
A commit in branch main references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=e974396d4c309caf72beca2db8bdd7282bf2c8e1

commit e974396d4c309caf72beca2db8bdd7282bf2c8e1
Author:     Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2023-02-27 18:04:08 +0000
Commit:     Cy Schubert <cy@FreeBSD.org>
CommitDate: 2023-03-01 23:58:27 +0000

    security/sudo: Update to 1.9.13p2

    Major changes between sudo 1.9.13p2 and 1.9.13p1:

     * Fixed the --enable-static-sudoers option, broken in sudo 1.9.13.
       GitHub issue #245.

     * Fixed a potential double-free bug when matching a sudoers rule
       that contains a per-command chroot directive (CHROOT=dir).  This
       bug was introduced in sudo 1.9.8.

    PR:             269854
    Approved by:    garga
    MFH:            2023Q1

 security/sudo/Makefile | 2 +-
 security/sudo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 3 commit-hook freebsd_committer freebsd_triage 2023-03-02 00:01:42 UTC 
A commit in branch 2023Q1 references this bug:

URL: https://cgit.FreeBSD.org/ports/commit/?id=070b02bcc05be2fe69ba156ee9da9add5b98e79d

commit 070b02bcc05be2fe69ba156ee9da9add5b98e79d
Author:     Cy Schubert <cy@FreeBSD.org>
AuthorDate: 2023-02-27 18:04:08 +0000
Commit:     Cy Schubert <cy@FreeBSD.org>
CommitDate: 2023-03-02 00:00:27 +0000

    security/sudo: Update to 1.9.13p2

    Major changes between sudo 1.9.13p2 and 1.9.13p1:

     * Fixed the --enable-static-sudoers option, broken in sudo 1.9.13.
       GitHub issue #245.

     * Fixed a potential double-free bug when matching a sudoers rule
       that contains a per-command chroot directive (CHROOT=dir).  This
       bug was introduced in sudo 1.9.8.

    PR:             269854
    Approved by:    garga

    (cherry picked from commit e974396d4c309caf72beca2db8bdd7282bf2c8e1)

 security/sudo/Makefile | 2 +-
 security/sudo/distinfo | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)
Comment 4 Cy Schubert freebsd_committer freebsd_triage 2023-03-02 04:01:25 UTC 
Committed.