HomeFreeBSD

security/sudo: Update to 1.9.8p2

Description

security/sudo: Update to 1.9.8p2

Major changes between sudo 1.9.8p2 and 1.9.8p1:

  • Fixed a potential out-of-bounds read with "sudo -i" when the target user's shell is bash. This is a regression introduced in sudo 1.9.8. Bug #998.
  • sudo_logsrvd now only sends a log ID for first command of a session. There is no need to send the log ID for each sub-command.
  • Fixed a few minor memory leaks in intercept mode.
  • Fixed a problem with sudo_logsrvd in relay mode if "store_first" was enabled when handling sub-commands. A new zero-length journal file was created for each sub-command instead of simply using the existing journal file.

PR: 258666
Submitted by: cy
Reported by: cy
Approved by: garga (maintainer)

(cherry picked from commit 3c5b4dac33fa23d0cb8464556adfcf8a5d097c5b)

Details

Provenance
cyAuthored on Sep 21 2021, 5:16 PM
Parents
R11:5815766ccf2b: security/sudo: Update to 1.9.8p1 to fix LDAP SEGFAULT
Branches
Unknown
Tags
Unknown