summaryrefslogtreecommitdiff
path: root/source/ap/sudo
diff options
context:
space:
mode:
authorPatrick J Volkerding <volkerdi@slackware.com>2020-01-31 20:46:25 +0000
committerEric Hameleers <alien@slackware.com>2020-02-01 08:59:50 +0100
commit4e955dc4b6fff43956d47c0286bb698e03f14b11 (patch)
tree8821f786c06617480dce97b28c23ee78836010c2 /source/ap/sudo
parent0012caf61824ffcca7bbe5cd19b79612d6445307 (diff)
downloadcurrent-4e955dc4b6fff43956d47c0286bb698e03f14b11.tar.gz
Fri Jan 31 20:46:25 UTC 202020200131204625
a/util-linux-2.35.1-x86_64-1.txz: Upgraded. a/zerofree-1.1.1-x86_64-1.txz: Added. Also queued up for the next installer build. Thanks to bifferos. ap/sudo-1.8.31-x86_64-1.txz: Upgraded. This update fixes a security issue: In Sudo before 1.8.31, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. (pwfeedback is a default setting in some Linux distributions; however, it is not the default for upstream or in Slackware, and would exist only if enabled by an administrator.) The attacker needs to deliver a long string to the stdin of getln() in tgetpass.c. For more information, see: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18634 (* Security fix *) n/NetworkManager-1.22.6-x86_64-1.txz: Upgraded. n/openldap-client-2.4.49-x86_64-1.txz: Upgraded. xfce/Thunar-1.8.11-x86_64-1.txz: Removed. xfce/thunar-1.8.12-x86_64-1.txz: Added. Changed package name from "Thunar" to "thunar" to follow upstream's naming.
Diffstat (limited to 'source/ap/sudo')
-rw-r--r--source/ap/sudo/sudo.url1
1 files changed, 1 insertions, 0 deletions
diff --git a/source/ap/sudo/sudo.url b/source/ap/sudo/sudo.url
new file mode 100644
index 00000000..78308974
--- /dev/null
+++ b/source/ap/sudo/sudo.url
@@ -0,0 +1 @@
+ftp://ftp.sudo.ws/pub/sudo