mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-04-23 09:32:17 +02:00
Code Issues Packages Projects Releases Wiki Activity

sudo: upgrade 1.9.12 -> 1.9.12p1

Browse Source 
mips-fix.patch
removed since it's included in 1.9.12p1

Changelog:
=========
 *Sudo's configure script now does a better job of detecting when the
 -fstack-clash-protection compiler option does not work. GitHub issue #191.
 *Fixed CVE-2022-43995, a potential out-of-bounds write for passwords smaller
  than 8 characters when passwd authentication is enabled. This does not affect
  configurations that use other authentication methods such as PAM, AIX
  authentication or BSD authentication.
 *Fixed a build error with some configurations compiling host_port.c.

(From OE-Core rev: 292acd9db1d7204f1435f31f2c37fd272b74eb97)

Signed-off-by: Wang Mingyu <wangmy@fujitsu.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
This commit is contained in:
Wang Mingyu
2022-11-13 11:11:37 +08:00
committed by Richard Purdie
parent 07eace6c01
commit 57d9840f14
2 changed files with 1 additions and 39 deletions
Download Patch File Download Diff File Expand all files Collapse all files

37
meta/recipes-extended/sudo/files/mips-fix.patch
View File

@@ -1,37 +0,0 @@
From 7944494196d4a9b33e0ae64a7e20f86e19c336d3 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@sudo.ws>
Date: Wed, 26 Oct 2022 16:35:30 -0600
Subject: [PATCH] Fix compilation error on Linux/mips.
Upstream-Status: Backport [https://github.com/sudo-project/sudo/commit/7944494196d4a9b33e0ae64a7e20f86e19c336d3]
Signed-off-by: Alexander Kanavin <alex@linutronix.de>
---
src/exec_ptrace.c | 9 +++++----
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/src/exec_ptrace.c b/src/exec_ptrace.c
index 81cd10bc2..208a75f88 100644
--- a/src/exec_ptrace.c
+++ b/src/exec_ptrace.c
@@ -282,16 +282,17 @@ set_sc_arg4(struct sudo_ptrace_regs *regs, unsigned long addr)
static bool
ptrace_getregs(int pid, struct sudo_ptrace_regs *regs, int compat)
{
+ struct iovec iov;
debug_decl(ptrace_getregs, SUDO_DEBUG_EXEC);
+ iov.iov_base = &regs->u;
+ iov.iov_len = sizeof(regs->u);
+
# ifdef __mips__
/* PTRACE_GETREGSET has bugs with the MIPS o32 ABI at least. */
- if (ptrace(PTRACE_GETREGS, pid, NULL, &regs->u) == -1)
+ if (ptrace(PTRACE_GETREGS, pid, NULL, iov.iov_base) == -1)
debug_return_bool(false);
# else
- struct iovec iov;
- iov.iov_base = &regs->u;
- iov.iov_len = sizeof(regs->u);
if (ptrace(PTRACE_GETREGSET, pid, (void *)NT_PRSTATUS, &iov) == -1)
debug_return_bool(false);
# endif /* __mips__ */

3
meta/recipes-extended/sudo/sudo_1.9.12.bb → meta/recipes-extended/sudo/sudo_1.9.12p1.bb
View File

@@ -4,12 +4,11 @@ SRC_URI = "https://www.sudo.ws/dist/sudo-${PV}.tar.gz \
${@bb.utils.contains('DISTRO_FEATURES', 'pam', '${PAM_SRC_URI}', '', d)} \
file://0001-sudo.conf.in-fix-conflict-with-multilib.patch \
file://0001-lib-util-mksigname.c-correctly-include-header-for-ou.patch \
file://mips-fix.patch \
"
PAM_SRC_URI = "file://sudo.pam"
SRC_URI[sha256sum] = "de15733888170c56834daafd34bf983db10fb21039742fcfc396bd32168d6362"
SRC_URI[sha256sum] = "475a18a8eb3da8b2917ceab063a6baf51ea09128c3c47e3e0e33ab7497bab7d8"
DEPENDS += " virtual/crypt ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'libpam', '', d)}"
RDEPENDS:${PN} += " ${@bb.utils.contains('DISTRO_FEATURES', 'pam', 'pam-plugin-limits pam-plugin-keyinit', '', d)}"