linux/poky.git/meta/recipes-extended/sudo, branch mickledore

sudo: upgrade 1.9.13p3 -> 1.9.15p2

2023-11-11T18:23:01+00:00

Upgrade 1.9.13p3 to 1.9.15p2 to fix bugs and CVEs License-update: file removed upstream Drop patch as issue fixed upstream. Changelogs: 1.9.15p2: https://www.sudo.ws/releases/stable/#1.9.15p2 1.9.15p1: https://www.sudo.ws/releases/stable/#1.9.15p1 1.9.15: https://www.sudo.ws/releases/stable/#1.9.15 1.9.14p3: https://www.sudo.ws/releases/stable/#1.9.14p3 1.9.14p2: https://www.sudo.ws/releases/stable/#1.9.14p2 1.9.14p1: https://www.sudo.ws/releases/stable/#1.9.14p1 1.9.14: https://www.sudo.ws/releases/stable/#1.9.14 (From OE-Core rev: 1681813ef11c813d8b7433790dfc60425e31bc63) Signed-off-by: Xiangyu Chen Signed-off-by: Steve Sakoman

sudo: update 1.9.12p2 -> 1.9.13p3

2023-03-14T17:10:00+00:00

(From OE-Core rev: 7d5193a9437dedb3f2cf35cb466acfe29cfa654e) Signed-off-by: Xiangyu Chen Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: update 1.9.12p2 -> 1.9.13p2

2023-03-11T00:08:40+00:00

License-update: copyright years, formatting. (From OE-Core rev: 1476813725cce6754334b4a6727675640a7a1e44) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: upgrade 1.9.12p1 -> 1.9.12p2

2023-02-09T09:57:25+00:00

(From OE-Core rev: 5a3f5f4f607f5e06af772287109b68579154fb2f) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

sudo: add selinux and audit PACKAGECONFIG

2022-11-27T23:54:51+00:00

Add selinux and audit PACKAGECONFIG logic in selinux layer[1] to conform to yocto compliance. [1] https://git.yoctoproject.org/meta-selinux/commit/?id=31325005e4409e08b7f68eed44a9c4086453e4dd (From OE-Core rev: 5c8e22895709a0ce7ce855468473d9d6d10a1e65) Signed-off-by: Mingli Yu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: upgrade 1.9.12 -> 1.9.12p1

2022-11-14T16:19:43+00:00

mips-fix.patch removed since it's included in 1.9.12p1 Changelog: ========= *Sudo's configure script now does a better job of detecting when the -fstack-clash-protection compiler option does not work. GitHub issue #191. *Fixed CVE-2022-43995, a potential out-of-bounds write for passwords smaller than 8 characters when passwd authentication is enabled. This does not affect configurations that use other authentication methods such as PAM, AIX authentication or BSD authentication. *Fixed a build error with some configurations compiling host_port.c. (From OE-Core rev: 292acd9db1d7204f1435f31f2c37fd272b74eb97) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: upgrade 1.9.11p3 -> 1.9.12

2022-11-08T22:47:16+00:00

License-Update: copyright years (From OE-Core rev: 4ad997fa4df80d543ac5dabe61f292f5819da302) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: upgrade 1.9.11p2 -> 1.9.11p3

2022-07-01T10:31:42+00:00

Changelog: ========== - Fixed "connection reset" errors on AIX when running shell scripts with the intercept or log_subcmds sudoers options enabled. Bug #1034. - Fixed very slow execution of shell scripts when the intercept or log_subcmds sudoers options are set on systems that enable Nagle's algorithm on the loopback device, such as AIX. Bug #1034. (From OE-Core rev: 2eaf00e0470b6b77910a349b74f9a634f6a42fb1) Signed-off-by: Wang Mingyu Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

sudo: upgrade 1.9.10 -> 1.9.11p2

2022-06-22T21:40:28+00:00

(From OE-Core rev: 8cb9306b3d41e18e582c581ade42c0b22ef7aea1) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

sudo: upgrade 1.9.9 -> 1.9.10

2022-03-10T13:07:37+00:00

Changelog: ========= Added new log_passwords and passprompt_regex sudoers options. Added new log_passwords and passprompt_regex settings to sudo_logsrvd that operate like the sudoers options when logging terminal input. Fixed several few bugs in the cvtsudoers utility when merging multiple sudoers sources. Fixed a bug in sudo_logsrvd parsing the sudo_logsrvd.conf file, where the retry_interval in the [relay] section was not being recognized. Restored the pre-1.9.9 behavior of not performing authentication when sudo's -n option is specified. On systems with /proc, if the /proc/self/stat (Linux) or /proc/pid/psinfo (other systems) file is missing or invalid, sudo will now check file descriptors 0-2 to determine the user's terminal. Bug #1020. Fixed a compilation problem on Debian kFreeBSD. Bug #1021. Fixed a crash in sudo_logsrvd when running in relay mode if an alert message is received. Fixed an issue that resulting in "problem with defaults entries" email to be sent if a user ran sudo when the sudoers entry in the nsswitch.conf file includes "sss" but no sudo provider is configured in /etc/sssd/sssd.conf. Bug #1022. Updated the warning displayed when the invoking user is not allowed to run sudo. Fixed a bug where the user-specified command timeout was not being honored if the sudoers rule did not also specify a timeout. Added support for using POSIX extended regular expressions in sudoers rules. A user may now only run sudo -U otheruser -l if they have a "sudo ALL" privilege where the RunAs user contains either root or otheruser. The sudo lecture is now displayed immediately before the password prompt. Sudo now uses its own closefrom() emulation on Linux systems. (From OE-Core rev: cbb7ff3abf52f38fea471b9510ba8bcec70c3058) Signed-off-by: Wang Mingyu Signed-off-by: Richard Purdie