1b193d34b2
Fix seuciry problem of CVE-2012-2337. What's new in Sudo 1.7.9p1? * Fixed a bug when matching against an IP address with an associated netmask in the sudoers file. In certain circumstances, this could allow users to run commands on hosts they are not authorized for. What's new in Sudo 1.7.9? * Fixed a false positive in visudo strict mode when aliases are in use. * The line on which a syntax error is reported in the sudoers file is now more accurate. Previously it was often off by a line. * The #include and #includedir directives in sudoers now support relative paths. If the path is not fully qualified it is expected to be located in the same directory of the sudoers file that is including it. * visudo will now fix the mode on the sudoers file even if no changes are made unless the -f option is specified. * The "use_loginclass" sudoers option works properly again. * For LDAP-based sudoers, values in the search expression are now escaped as per RFC 4515. * Fixed a race condition when I/O logging is not enabled that could result in tty-generated signals (e.g. control-C) being received by the command twice. * If none of the standard input, output or error are connected to a tty device, sudo will now check its parent's standard input, output or error for the tty name on systems with /proc and BSD systems that support the KERN_PROC_PID sysctl. This allows tty-based tickets to work properly even when, e.g. standard input, output and error are redirected to /dev/null. * Fixed a bug where a pattern like "/usr/*" included /usr/bin/ in the results, which would be incorrectly be interpreted as if the sudoers file had specified a directory. * "visudo -c" will now list any include files that were checked in addition to the main sudoers file when everything parses OK. * Users that only have read-only access to the sudoers file may now run "visudo -c". Previously, write permissions were required even though no writing is down in check-only mode. What's new in Sudo 1.7.8p2? * Fixed a crash in the monitor process on Solaris when NOPASSWD was specified or when authentication was disabled.
10 lines
550 B
Text
10 lines
550 B
Text
$NetBSD: distinfo,v 1.78 2012/05/16 14:49:55 taca Exp $
|
|
|
|
SHA1 (sudo-1.7.9p1.tar.gz) = cbca68bae8b85e8518690d78685ca67d0696ce15
|
|
RMD160 (sudo-1.7.9p1.tar.gz) = 1ec37d34bad3ab3a27ec123da81d33e2ac3deb72
|
|
Size (sudo-1.7.9p1.tar.gz) = 1173934 bytes
|
|
SHA1 (patch-aa) = 014a8a634abb3c61f63e3e127a4ebf20f5a0e4bf
|
|
SHA1 (patch-af) = 0dce4ebbc82ab644565f71e8f472c407ddbaabf5
|
|
SHA1 (patch-ag) = fe8409164b61bdb229ca81d391de96898436ea0b
|
|
SHA1 (patch-logging.c) = 26608d7423b77f71f17b37cc87f4b2e75978d7cb
|
|
SHA1 (patch-pwutil.c) = 9f157c50ea44d5b421001ae8dad985e9c01a8211
|