Changeset 6f306ab9

Timestamp:

02/01/2012 01:33:00 PM (12 years ago)

Author:

Andrew Benton <andy@…>

Branches:

10.0, 10.1, 11.0, 11.1, 11.2, 11.3, 12.0, 12.1, 7.10, 7.4, 7.5, 7.6, 7.6-blfs, 7.6-systemd, 7.7, 7.8, 7.9, 8.0, 8.1, 8.2, 8.3, 8.4, 9.0, 9.1, basic, bdubbs/svn, elogind, gnome, kde5-13430, kde5-14269, kde5-14686, kea, ken/TL2024, ken/inkscape-core-mods, ken/tuningfonts, krejzi/svn, lazarus, lxqt, nosym, perl-modules, plabs/newcss, plabs/python-mods, python3.11, qt5new, rahul/power-profiles-daemon, renodr/vulkan-addition, systemd-11177, systemd-13485, trunk, upgradedb, xry111/intltool, xry111/llvm18, xry111/soup3, xry111/test-20220226, xry111/xf86-video-removal

Children:

2f0a768

Parents:

20c59bd

Message:

patch sudo to fix a security problem

git-svn-id: svn://svn.linuxfromscratch.org/BLFS/trunk/BOOK@9256 af4574ff-66df-0310-9fd7-8a98e5e911e0

File:

• postlfs/security/sudo.xml (modified) (3 diffs)

postlfs/security/sudo.xml

@@ -57 +57 @@
       <listitem>
         <para>Estimated build time: &sudo-time;</para>
+      </listitem>
+    </itemizedlist>
+
+    <bridgehead renderas="sect3">Additional Downloads</bridgehead>
+    <itemizedlist spacing="compact">
+      <listitem>
+        <para>Required patch: <ulink
+        url="&patch-root;/sudo-&sudo-version;-fprintf_debug-1.patch"/></para>
       </listitem>
     </itemizedlist>
@@ -85 +93 @@
     the following commands:</para>
 
-<screen><userinput>./configure --prefix=/usr \
+<screen><userinput>patch -p1 &lt; ../sudo-&sudo-version;-fprintf_debug-1.patch &amp;&amp;
+./configure --prefix=/usr \
             --libexecdir=/usr/lib \
             --with-ignore-dot \
@@ -106 +115 @@
   <sect2 role="commands">
     <title>Command Explanations</title>
+
+    <para><command>patch -p1 &lt; ...</command>: This patch fixes a
+    vulnerability in the debugging code in sudo versions 1.8.0 through 1.8.3p1
+    that can be used to crash sudo or potentially allow an unauthorized user to
+    achieve root privileges.</para>
 
     <para><option>--with-ignore-dot</option>: This switch causes