sudo: upgrade to 1.6.8p12 due to CVE-2005-1993
authorMarcin Juszkiewicz <hrw@openembedded.org>
Tue, 22 Nov 2005 15:00:10 +0000 (15:00 +0000)
committerOpenEmbedded Project <openembedded-devel@lists.openembedded.org>
Tue, 22 Nov 2005 15:00:10 +0000 (15:00 +0000)
- Race condition in sudo 1.3.1 up to 1.6.8p8, when the ALL pseudo-command is
  used after a user entry in the sudoers file, allows local users to gain
  privileges via a symlink attack.
- Thanks to Jamie Lenehan for notice
- close #486

packages/sudo/sudo_1.6.8p12.bb [moved from packages/sudo/sudo_1.6.8p8.bb with 95% similarity]

similarity index 95%
rename from packages/sudo/sudo_1.6.8p8.bb
rename to packages/sudo/sudo_1.6.8p12.bb
index cc8ae40..f9d5541 100644 (file)
@@ -5,4 +5,3 @@ SRC_URI = "http://ftp.sudo.ws/sudo/dist/sudo-${PV}.tar.gz \
           file://noexec-link.patch;patch=1"
 
 include sudo.inc
-PR = "r4"