diff options
| author | Gustavo Zacarias <gustavo@zacarias.com.ar> | 2015-02-17 09:50:51 -0300 |
|---|---|---|
| committer | Thomas Petazzoni <thomas.petazzoni@free-electrons.com> | 2015-02-17 14:01:14 +0100 |
| commit | 3bd38b4ecaa897ee2a892be9e6f76fcc2d12000a (patch) | |
| tree | 324e111da2d19663bf06c9b79ba5a253dbf28d93 /package/sudo/0001-no-netgroup.patch | |
| parent | b34c63375a88999d232129428a2297f5ddb9c465 (diff) | |
| download | buildroot-3bd38b4ecaa897ee2a892be9e6f76fcc2d12000a.tar.gz buildroot-3bd38b4ecaa897ee2a892be9e6f76fcc2d12000a.zip | |
sudo: security bump to version 1.8.12
Fixes CVE-2014-9680 - A user with sudo access may be able to exploit
parsing bugs in the time zone parsing functions of the system's C
library functions. The user may also be able to read arbitrary files,
potentially causing changes in system behavior when reading certain
device special files or simply causing the program run via sudo to
block.
Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@free-electrons.com>
Diffstat (limited to 'package/sudo/0001-no-netgroup.patch')
| -rw-r--r-- | package/sudo/0001-no-netgroup.patch | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/package/sudo/0001-no-netgroup.patch b/package/sudo/0001-no-netgroup.patch deleted file mode 100644 index 64b870c67a..0000000000 --- a/package/sudo/0001-no-netgroup.patch +++ /dev/null @@ -1,29 +0,0 @@ -# HG changeset patch -# User Todd C. Miller <Todd.Miller@courtesan.com> -# Date 1406550172 21600 -# Node ID 57deb66ef8ffc0f551d460e15a34f7df78f54d2a -# Parent f547bf80c436c07ddb1c7385d22db96862ae7e4f -Fix compilation on systems w/o netgroups. - -Status: upstream - -Signed-off-by: Gustavo Zacarias <gustavo@zacarias.com.ar> - -diff -r f547bf80c436 -r 57deb66ef8ff plugins/sudoers/match.c ---- a/plugins/sudoers/match.c Sat Jul 26 06:07:34 2014 -0600 -+++ b/plugins/sudoers/match.c Mon Jul 28 06:22:52 2014 -0600 -@@ -972,12 +972,12 @@ - rc = true; - else if (lhost != shost && innetgr(netgr, shost, user, domain)) - rc = true; --#endif /* HAVE_INNETGR */ - - sudo_debug_printf(SUDO_DEBUG_DEBUG|SUDO_DEBUG_LINENO, - "netgroup %s matches (%s|%s, %s, %s): %s", netgr, lhost ? lhost : "", - shost ? shost : "", user ? user : "", domain ? domain : "", - rc ? "true" : "false"); -+#endif /* HAVE_INNETGR */ - - debug_return_bool(rc); - } - |
