Hello community, here is the log from the commit of package sudo for openSUSE:Factory checked in at 2012-02-01 13:17:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/sudo (Old) and /work/SRC/openSUSE:Factory/.sudo.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sudo", Maintainer is "vci...@suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/sudo/sudo.changes 2012-01-26 16:00:39.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.sudo.new/sudo.changes 2012-02-01 13:17:32.000000000 +0100 @@ -1,0 +2,8 @@ +Tue Jan 31 12:30:58 UTC 2012 - vci...@suse.com + +- update to 1.8.3p2 + * Fixed a format string vulnerability when the sudo binary + (or a symbolic link to the sudo binary) contains printf + format escapes and the -D (debugging) flag is used. + +------------------------------------------------------------------- Old: ---- sudo-1.8.3p1.tar.gz New: ---- sudo-1.8.3p2.tar.gz ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ sudo.spec ++++++ --- /var/tmp/diff_new_pack.Xpbnvu/_old 2012-02-01 13:17:35.000000000 +0100 +++ /var/tmp/diff_new_pack.Xpbnvu/_new 2012-02-01 13:17:35.000000000 +0100 @@ -15,8 +15,9 @@ # Please submit bugfixes or comments via http://bugs.opensuse.org/ # + Name: sudo -Version: 1.8.3p1 +Version: 1.8.3p2 Release: 0 Summary: Execute some commands as root License: BSD-3-Clause ++++++ sudo-1.8.3p1.tar.gz -> sudo-1.8.3p2.tar.gz ++++++ diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/ChangeLog new/sudo-1.8.3p2/ChangeLog --- old/sudo-1.8.3p1/ChangeLog 2011-10-25 21:15:38.000000000 +0200 +++ new/sudo-1.8.3p2/ChangeLog 2012-01-24 22:17:30.000000000 +0100 @@ -1,3 +1,17 @@ +2012-01-24 Todd C. Miller <todd.mil...@courtesan.com> + + * src/sudo.c: + Fixed a format string vulnerability when the sudo binary (or a + symbolic link to the sudo binary) contains printf format escapes + and the -D (debugging) flag is used. + +2012-01-13 Todd C. Miller <todd.mil...@courtesan.com> + + * sudo.pp: + Include parent directories in case they don't already exist. This + fixes a directory permissions problem with the AIX package when the + /usr/local directories don't already exist. + 2011-10-25 Todd C. Miller <todd.mil...@courtesan.com> * plugins/sudoers/Makefile.in: diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/NEWS new/sudo-1.8.3p2/NEWS --- old/sudo-1.8.3p1/NEWS 2011-10-25 20:58:26.000000000 +0200 +++ new/sudo-1.8.3p2/NEWS 2012-01-24 20:33:06.000000000 +0100 @@ -1,3 +1,9 @@ +What's new in Sudo 1.8.3p2? + + * Fixed a format string vulnerability when the sudo binary (or a + symbolic link to the sudo binary) contains printf format escapes + and the -D (debugging) flag is used. + What's new in Sudo 1.8.3p1? * Fixed a crash in the monitor process on Solaris when NOPASSWD diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/configure new/sudo-1.8.3p2/configure --- old/sudo-1.8.3p1/configure 2011-10-25 16:11:54.000000000 +0200 +++ new/sudo-1.8.3p2/configure 2012-01-24 20:34:13.000000000 +0100 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.68 for sudo 1.8.3p1. +# Generated by GNU Autoconf 2.68 for sudo 1.8.3p2. # # Report bugs to <http://www.sudo.ws/bugs/>. # @@ -570,8 +570,8 @@ # Identity of this package. PACKAGE_NAME='sudo' PACKAGE_TARNAME='sudo' -PACKAGE_VERSION='1.8.3p1' -PACKAGE_STRING='sudo 1.8.3p1' +PACKAGE_VERSION='1.8.3p2' +PACKAGE_STRING='sudo 1.8.3p2' PACKAGE_BUGREPORT='http://www.sudo.ws/bugs/' PACKAGE_URL='' @@ -1446,7 +1446,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures sudo 1.8.3p1 to adapt to many kinds of systems. +\`configure' configures sudo 1.8.3p2 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1511,7 +1511,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of sudo 1.8.3p1:";; + short | recursive ) echo "Configuration of sudo 1.8.3p2:";; esac cat <<\_ACEOF @@ -1728,7 +1728,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -sudo configure 1.8.3p1 +sudo configure 1.8.3p2 generated by GNU Autoconf 2.68 Copyright (C) 2010 Free Software Foundation, Inc. @@ -2432,7 +2432,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by sudo $as_me 1.8.3p1, which was +It was created by sudo $as_me 1.8.3p2, which was generated by GNU Autoconf 2.68. Invocation command line was $ $0 $@ @@ -20615,7 +20615,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by sudo $as_me 1.8.3p1, which was +This file was extended by sudo $as_me 1.8.3p2, which was generated by GNU Autoconf 2.68. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -20681,7 +20681,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -sudo config.status 1.8.3p1 +sudo config.status 1.8.3p2 configured by $0, generated by GNU Autoconf 2.68, with options \\"\$ac_cs_config\\" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/configure.in new/sudo-1.8.3p2/configure.in --- old/sudo-1.8.3p1/configure.in 2011-10-25 16:11:40.000000000 +0200 +++ new/sudo-1.8.3p2/configure.in 2012-01-24 20:34:10.000000000 +0100 @@ -3,7 +3,7 @@ dnl dnl Copyright (c) 1994-1996,1998-2011 Todd C. Miller <todd.mil...@courtesan.com> dnl -AC_INIT([sudo], [1.8.3p1], [http://www.sudo.ws/bugs/], [sudo]) +AC_INIT([sudo], [1.8.3p2], [http://www.sudo.ws/bugs/], [sudo]) AC_CONFIG_HEADER([config.h pathnames.h]) dnl dnl Note: this must come after AC_INIT diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/plugins/sudoers/po/sudoers.pot new/sudo-1.8.3p2/plugins/sudoers/po/sudoers.pot --- old/sudo-1.8.3p1/plugins/sudoers/po/sudoers.pot 2011-10-21 15:01:41.000000000 +0200 +++ new/sudo-1.8.3p2/plugins/sudoers/po/sudoers.pot 2012-01-24 22:12:41.000000000 +0100 @@ -5,9 +5,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: sudo 1.8.3\n" +"Project-Id-Version: sudo 1.8.3p2\n" "Report-Msgid-Bugs-To: http://www.sudo.ws/bugs\n"; -"POT-Creation-Date: 2011-10-10 15:50-0400\n" +"POT-Creation-Date: 2012-01-24 16:12-0500\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <l...@li.org>\n" @@ -64,98 +64,98 @@ msgid "au_to_text: failed" msgstr "" -#: plugins/sudoers/check.c:149 +#: plugins/sudoers/check.c:157 #, c-format msgid "sorry, a password is required to run %s" msgstr "" -#: plugins/sudoers/check.c:236 plugins/sudoers/iolog.c:169 -#: plugins/sudoers/sudoers.c:964 plugins/sudoers/sudoreplay.c:325 +#: plugins/sudoers/check.c:244 plugins/sudoers/iolog.c:169 +#: plugins/sudoers/sudoers.c:960 plugins/sudoers/sudoreplay.c:325 #: plugins/sudoers/sudoreplay.c:334 plugins/sudoers/sudoreplay.c:675 #: plugins/sudoers/sudoreplay.c:767 plugins/sudoers/visudo.c:744 #, c-format msgid "unable to open %s" msgstr "" -#: plugins/sudoers/check.c:240 plugins/sudoers/iolog.c:199 +#: plugins/sudoers/check.c:248 plugins/sudoers/iolog.c:199 #, c-format msgid "unable to write to %s" msgstr "" -#: plugins/sudoers/check.c:248 plugins/sudoers/check.c:486 -#: plugins/sudoers/check.c:536 plugins/sudoers/iolog.c:122 +#: plugins/sudoers/check.c:256 plugins/sudoers/check.c:494 +#: plugins/sudoers/check.c:544 plugins/sudoers/iolog.c:122 #: plugins/sudoers/iolog.c:153 #, c-format msgid "unable to mkdir %s" msgstr "" -#: plugins/sudoers/check.c:381 +#: plugins/sudoers/check.c:389 #, c-format msgid "internal error, expand_prompt() overflow" msgstr "" -#: plugins/sudoers/check.c:437 +#: plugins/sudoers/check.c:445 #, c-format msgid "timestamp path too long: %s" msgstr "" -#: plugins/sudoers/check.c:465 plugins/sudoers/check.c:509 +#: plugins/sudoers/check.c:473 plugins/sudoers/check.c:517 #: plugins/sudoers/iolog.c:155 #, c-format msgid "%s exists but is not a directory (0%o)" msgstr "" -#: plugins/sudoers/check.c:468 plugins/sudoers/check.c:512 -#: plugins/sudoers/check.c:557 +#: plugins/sudoers/check.c:476 plugins/sudoers/check.c:520 +#: plugins/sudoers/check.c:565 #, c-format msgid "%s owned by uid %u, should be uid %u" msgstr "" -#: plugins/sudoers/check.c:473 plugins/sudoers/check.c:517 +#: plugins/sudoers/check.c:481 plugins/sudoers/check.c:525 #, c-format msgid "%s writable by non-owner (0%o), should be mode 0700" msgstr "" -#: plugins/sudoers/check.c:481 plugins/sudoers/check.c:525 -#: plugins/sudoers/check.c:593 plugins/sudoers/sudoers.c:950 +#: plugins/sudoers/check.c:489 plugins/sudoers/check.c:533 +#: plugins/sudoers/check.c:601 plugins/sudoers/sudoers.c:946 #: plugins/sudoers/visudo.c:304 plugins/sudoers/visudo.c:544 #, c-format msgid "unable to stat %s" msgstr "" -#: plugins/sudoers/check.c:551 +#: plugins/sudoers/check.c:559 #, c-format msgid "%s exists but is not a regular file (0%o)" msgstr "" -#: plugins/sudoers/check.c:563 +#: plugins/sudoers/check.c:571 #, c-format msgid "%s writable by non-owner (0%o), should be mode 0600" msgstr "" -#: plugins/sudoers/check.c:617 +#: plugins/sudoers/check.c:625 #, c-format msgid "timestamp too far in the future: %20.20s" msgstr "" -#: plugins/sudoers/check.c:663 +#: plugins/sudoers/check.c:671 #, c-format msgid "unable to remove %s (%s), will reset to the epoch" msgstr "" -#: plugins/sudoers/check.c:671 +#: plugins/sudoers/check.c:679 #, c-format msgid "unable to reset %s to the epoch" msgstr "" -#: plugins/sudoers/check.c:725 plugins/sudoers/check.c:731 -#: plugins/sudoers/sudoers.c:804 plugins/sudoers/sudoers.c:808 +#: plugins/sudoers/check.c:733 plugins/sudoers/check.c:739 +#: plugins/sudoers/sudoers.c:800 plugins/sudoers/sudoers.c:804 #, c-format msgid "unknown uid: %u" msgstr "" -#: plugins/sudoers/check.c:728 plugins/sudoers/sudoers.c:746 -#: plugins/sudoers/sudoers.c:1081 plugins/sudoers/testsudoers.c:202 +#: plugins/sudoers/check.c:736 plugins/sudoers/sudoers.c:742 +#: plugins/sudoers/sudoers.c:1077 plugins/sudoers/testsudoers.c:202 #: plugins/sudoers/testsudoers.c:337 #, c-format msgid "unknown user: %s" @@ -570,7 +570,7 @@ #: plugins/sudoers/find_path.c:68 plugins/sudoers/find_path.c:107 #: plugins/sudoers/find_path.c:122 plugins/sudoers/iolog.c:124 -#: plugins/sudoers/sudoers.c:896 toke.l:663 toke.l:814 +#: plugins/sudoers/sudoers.c:892 toke.l:663 toke.l:814 #, c-format msgid "%s: %s" msgstr "" @@ -614,7 +614,7 @@ msgid "Local IP address and netmask pairs:\n" msgstr "" -#: plugins/sudoers/iolog.c:176 plugins/sudoers/sudoers.c:971 +#: plugins/sudoers/iolog.c:176 plugins/sudoers/sudoers.c:967 #, c-format msgid "unable to read %s" msgstr "" @@ -945,7 +945,7 @@ msgstr "" #: plugins/sudoers/sudoers.c:201 plugins/sudoers/sudoers.c:232 -#: plugins/sudoers/sudoers.c:904 +#: plugins/sudoers/sudoers.c:900 msgid "problem with defaults entries" msgstr "" @@ -983,130 +983,130 @@ msgid "sorry, you must have a tty to run sudo" msgstr "" -#: plugins/sudoers/sudoers.c:461 +#: plugins/sudoers/sudoers.c:457 msgid "No user or host" msgstr "" -#: plugins/sudoers/sudoers.c:475 plugins/sudoers/sudoers.c:496 -#: plugins/sudoers/sudoers.c:497 plugins/sudoers/sudoers.c:1458 -#: plugins/sudoers/sudoers.c:1459 +#: plugins/sudoers/sudoers.c:471 plugins/sudoers/sudoers.c:492 +#: plugins/sudoers/sudoers.c:493 plugins/sudoers/sudoers.c:1454 +#: plugins/sudoers/sudoers.c:1455 #, c-format msgid "%s: command not found" msgstr "" -#: plugins/sudoers/sudoers.c:477 plugins/sudoers/sudoers.c:493 +#: plugins/sudoers/sudoers.c:473 plugins/sudoers/sudoers.c:489 #, c-format msgid "" "ignoring `%s' found in '.'\n" "Use `sudo ./%s' if this is the `%s' you wish to run." msgstr "" -#: plugins/sudoers/sudoers.c:482 +#: plugins/sudoers/sudoers.c:478 msgid "validation failure" msgstr "" -#: plugins/sudoers/sudoers.c:492 +#: plugins/sudoers/sudoers.c:488 msgid "command in current directory" msgstr "" -#: plugins/sudoers/sudoers.c:504 +#: plugins/sudoers/sudoers.c:500 #, c-format msgid "sorry, you are not allowed to preserve the environment" msgstr "" -#: plugins/sudoers/sudoers.c:887 +#: plugins/sudoers/sudoers.c:883 #, c-format msgid "internal error, set_cmnd() overflow" msgstr "" -#: plugins/sudoers/sudoers.c:929 +#: plugins/sudoers/sudoers.c:925 #, c-format msgid "fixed mode on %s" msgstr "" -#: plugins/sudoers/sudoers.c:933 +#: plugins/sudoers/sudoers.c:929 #, c-format msgid "set group on %s" msgstr "" -#: plugins/sudoers/sudoers.c:936 +#: plugins/sudoers/sudoers.c:932 #, c-format msgid "unable to set group on %s" msgstr "" -#: plugins/sudoers/sudoers.c:939 +#: plugins/sudoers/sudoers.c:935 #, c-format msgid "unable to fix mode on %s" msgstr "" -#: plugins/sudoers/sudoers.c:952 +#: plugins/sudoers/sudoers.c:948 #, c-format msgid "%s is not a regular file" msgstr "" -#: plugins/sudoers/sudoers.c:954 +#: plugins/sudoers/sudoers.c:950 #, c-format msgid "%s is mode 0%o, should be 0%o" msgstr "" -#: plugins/sudoers/sudoers.c:958 +#: plugins/sudoers/sudoers.c:954 #, c-format msgid "%s is owned by uid %u, should be %u" msgstr "" -#: plugins/sudoers/sudoers.c:961 +#: plugins/sudoers/sudoers.c:957 #, c-format msgid "%s is owned by gid %u, should be %u" msgstr "" -#: plugins/sudoers/sudoers.c:1005 +#: plugins/sudoers/sudoers.c:1001 #, c-format msgid "only root can use `-c %s'" msgstr "" -#: plugins/sudoers/sudoers.c:1015 +#: plugins/sudoers/sudoers.c:1011 #, c-format msgid "unknown login class: %s" msgstr "" -#: plugins/sudoers/sudoers.c:1049 +#: plugins/sudoers/sudoers.c:1045 #, c-format msgid "unable to resolve host %s" msgstr "" -#: plugins/sudoers/sudoers.c:1099 plugins/sudoers/testsudoers.c:351 +#: plugins/sudoers/sudoers.c:1095 plugins/sudoers/testsudoers.c:351 #, c-format msgid "unknown group: %s" msgstr "" -#: plugins/sudoers/sudoers.c:1143 +#: plugins/sudoers/sudoers.c:1139 #, c-format msgid "Sudoers policy plugin version %s\n" msgstr "" -#: plugins/sudoers/sudoers.c:1145 +#: plugins/sudoers/sudoers.c:1141 #, c-format msgid "Sudoers file grammar version %d\n" msgstr "" -#: plugins/sudoers/sudoers.c:1149 +#: plugins/sudoers/sudoers.c:1145 #, c-format msgid "" "\n" "Sudoers path: %s\n" msgstr "" -#: plugins/sudoers/sudoers.c:1152 +#: plugins/sudoers/sudoers.c:1148 #, c-format msgid "nsswitch path: %s\n" msgstr "" -#: plugins/sudoers/sudoers.c:1154 +#: plugins/sudoers/sudoers.c:1150 #, c-format msgid "ldap.conf path: %s\n" msgstr "" -#: plugins/sudoers/sudoers.c:1155 +#: plugins/sudoers/sudoers.c:1151 #, c-format msgid "ldap.secret path: %s\n" msgstr "" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/src/po/sudo.pot new/sudo-1.8.3p2/src/po/sudo.pot --- old/sudo-1.8.3p1/src/po/sudo.pot 2011-10-21 15:01:41.000000000 +0200 +++ new/sudo-1.8.3p2/src/po/sudo.pot 2012-01-24 22:12:41.000000000 +0100 @@ -5,9 +5,9 @@ #, fuzzy msgid "" msgstr "" -"Project-Id-Version: sudo 1.8.3\n" +"Project-Id-Version: sudo 1.8.3p2\n" "Report-Msgid-Bugs-To: http://www.sudo.ws/bugs\n"; -"POT-Creation-Date: 2011-09-27 14:07-0400\n" +"POT-Creation-Date: 2012-01-24 16:12-0500\n" "PO-Revision-Date: YEAR-MO-DA HO:MI+ZONE\n" "Last-Translator: FULL NAME <EMAIL@ADDRESS>\n" "Language-Team: LANGUAGE <l...@li.org>\n" diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/src/sudo.c new/sudo-1.8.3p2/src/sudo.c --- old/sudo-1.8.3p1/src/sudo.c 2011-10-21 15:01:26.000000000 +0200 +++ new/sudo-1.8.3p2/src/sudo.c 2012-01-24 21:59:03.000000000 +0100 @@ -1208,15 +1208,15 @@ sudo_debug(int level, const char *fmt, ...) { va_list ap; - char *fmt2; + char *buf; if (level > debug_level) return; - /* Backet fmt with program name and a newline to make it a single write */ - easprintf(&fmt2, "%s: %s\n", getprogname(), fmt); + /* Bracket fmt with program name and a newline to make it a single write */ va_start(ap, fmt); - vfprintf(stderr, fmt2, ap); + evasprintf(&buf, fmt, ap); va_end(ap); - efree(fmt2); + fprintf(stderr, "%s: %s\n", getprogname(), buf); + efree(buf); } diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn' '--exclude=.svnignore' old/sudo-1.8.3p1/sudo.pp new/sudo-1.8.3p2/sudo.pp --- old/sudo-1.8.3p1/sudo.pp 2011-10-21 15:01:26.000000000 +0200 +++ new/sudo-1.8.3p2/sudo.pp 2012-01-16 19:37:13.000000000 +0100 @@ -176,13 +176,26 @@ EOF %endif + # OS-level directories that should generally exist but might not. + extradirs=`echo ${pp_destdir}/${mandir}/[mc]* | sed "s#${pp_destdir}/##g"` + extradirs="$extradirs `dirname $docdir` `dirname $timedir`" + test -d ${pp_destdir}/etc/pam.d && extradirs="${extradirs} /etc/pam.d" + for dir in $bindir $sbindir $libexecdir $includedir $extradirs; do + while test "$dir" != "/"; do + osdirs="${osdirs}${osdirs+ }$dir/" + dir=`dirname $dir` + done + done + osdirs=`echo $osdirs | tr " " "\n" | sort -u` + %files + $osdirs - $bindir/sudo 4111 root: $bindir/sudoedit 4111 root: $sbindir/visudo 0111 $bindir/sudoreplay 0111 $includedir/sudo_plugin.h - $libexecdir/* + $libexecdir/* optional $sudoersdir/sudoers.d/ 0750 $sudoers_uid:$sudoers_gid $timedir/ 0700 root: $docdir/ -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org
