This patch will upgrade Sudo version 1.8.19 to Sudo version 1.8.19 patchlevel 1. To apply: $ cd sudo-1.8.19 $ patch -p1 < sudo-1.8.19p1.patch diff -urNa sudo-1.8.19/ChangeLog sudo-1.8.19p1/ChangeLog --- sudo-1.8.19/ChangeLog Sun Dec 18 06:53:09 2016 +++ sudo-1.8.19p1/ChangeLog Tue Dec 20 10:29:40 2016 @@ -1,3 +1,28 @@ +2016-12-20 Todd C. Miller + + * NEWS, configure, configure.ac: + sudo 1.8.19p1 + [7bfd43fa5caf] + + * plugins/sudoers/defaults.c: + Fix logic bug when matching syslog priority and facility. + [576cc9eb850f] + + * doc/HISTORY: + Dell spun off Quest so simplify the history by just talking about + Quest and not Dell. + [a66120495435] + +2016-12-19 Todd C. Miller + + * doc/LICENSE: + Fix copyright year + [3122e55195a6] + + * NEWS: + typo + [ffe9e84928b6] + 2016-12-18 Todd C. Miller * include/sudo_compat.h: diff -urNa sudo-1.8.19/NEWS sudo-1.8.19p1/NEWS --- sudo-1.8.19/NEWS Sun Dec 18 06:52:23 2016 +++ sudo-1.8.19p1/NEWS Tue Dec 20 10:28:49 2016 @@ -1,3 +1,8 @@ +What's new in Sudo 1.8.19p1 + + * Fixed a bug introduced in sudo 1.8.19 that resulted in the wrong + syslog priority and facility being used. + What's new in Sudo 1.8.19 * New "syslog_maxlen" Defaults option to control the maximum size of @@ -29,7 +34,7 @@ unknown or unparsable Defaults entry to go directly to the file with the problem. - * Fix a bug in the sudoers LDAP back-end where a negated sudoHost + * Fixed a bug in the sudoers LDAP back-end where a negated sudoHost entry would prevent other sudoHost entries following it from matching. * Warnings from visudo about a cycle in an Alias entry now include the diff -urNa sudo-1.8.19/configure sudo-1.8.19p1/configure --- sudo-1.8.19/configure Sun Dec 18 06:52:23 2016 +++ sudo-1.8.19p1/configure Tue Dec 20 10:28:49 2016 @@ -1,6 +1,6 @@ #! /bin/sh # Guess values for system-dependent variables and create Makefiles. -# Generated by GNU Autoconf 2.69 for sudo 1.8.19. +# Generated by GNU Autoconf 2.69 for sudo 1.8.19p1. # # Report bugs to . # @@ -590,8 +590,8 @@ # Identity of this package. PACKAGE_NAME='sudo' PACKAGE_TARNAME='sudo' -PACKAGE_VERSION='1.8.19' -PACKAGE_STRING='sudo 1.8.19' +PACKAGE_VERSION='1.8.19p1' +PACKAGE_STRING='sudo 1.8.19p1' PACKAGE_BUGREPORT='https://bugzilla.sudo.ws/' PACKAGE_URL='' @@ -1531,7 +1531,7 @@ # Omit some internal or obsolete options to make the list less imposing. # This message is too long to be a string in the A/UX 3.1 sh. cat <<_ACEOF -\`configure' configures sudo 1.8.19 to adapt to many kinds of systems. +\`configure' configures sudo 1.8.19p1 to adapt to many kinds of systems. Usage: $0 [OPTION]... [VAR=VALUE]... @@ -1596,7 +1596,7 @@ if test -n "$ac_init_help"; then case $ac_init_help in - short | recursive ) echo "Configuration of sudo 1.8.19:";; + short | recursive ) echo "Configuration of sudo 1.8.19p1:";; esac cat <<\_ACEOF @@ -1845,7 +1845,7 @@ test -n "$ac_init_help" && exit $ac_status if $ac_init_version; then cat <<\_ACEOF -sudo configure 1.8.19 +sudo configure 1.8.19p1 generated by GNU Autoconf 2.69 Copyright (C) 2012 Free Software Foundation, Inc. @@ -2554,7 +2554,7 @@ This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. -It was created by sudo $as_me 1.8.19, which was +It was created by sudo $as_me 1.8.19p1, which was generated by GNU Autoconf 2.69. Invocation command line was $ $0 $@ @@ -26552,7 +26552,7 @@ # report actual input values of CONFIG_FILES etc. instead of their # values after options handling. ac_log=" -This file was extended by sudo $as_me 1.8.19, which was +This file was extended by sudo $as_me 1.8.19p1, which was generated by GNU Autoconf 2.69. Invocation command line was CONFIG_FILES = $CONFIG_FILES @@ -26618,7 +26618,7 @@ cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1 ac_cs_config="`$as_echo "$ac_configure_args" | sed 's/^ //; s/[\\""\`\$]/\\\\&/g'`" ac_cs_version="\\ -sudo config.status 1.8.19 +sudo config.status 1.8.19p1 configured by $0, generated by GNU Autoconf 2.69, with options \\"\$ac_cs_config\\" diff -urNa sudo-1.8.19/configure.ac sudo-1.8.19p1/configure.ac --- sudo-1.8.19/configure.ac Sun Dec 18 06:52:23 2016 +++ sudo-1.8.19p1/configure.ac Tue Dec 20 10:28:49 2016 @@ -4,7 +4,7 @@ dnl Copyright (c) 1994-1996,1998-2016 Todd C. Miller dnl AC_PREREQ([2.59]) -AC_INIT([sudo], [1.8.19], [https://bugzilla.sudo.ws/], [sudo]) +AC_INIT([sudo], [1.8.19p1], [https://bugzilla.sudo.ws/], [sudo]) AC_CONFIG_HEADER([config.h pathnames.h]) AC_CONFIG_SRCDIR([src/sudo.c]) dnl diff -urNa sudo-1.8.19/doc/HISTORY sudo-1.8.19p1/doc/HISTORY --- sudo-1.8.19/doc/HISTORY Sun Dec 18 06:52:06 2016 +++ sudo-1.8.19p1/doc/HISTORY Tue Dec 20 10:28:49 2016 @@ -61,13 +61,11 @@ Quest Sponsorship -In 2010, Quest Software began sponsoring Sudo development by hiring Todd to -work on Sudo as part of his full-time job. - -Dell Sponsorship - -In 2012, Dell acquired Quest Software and continues to sponsor Sudo -development. +In 2010, Quest Software began sponsoring Sudo development by hiring +Todd to work on Sudo as part of his full-time job. This enabled +the addition of I/O logging, the plugin interface, additional +regression tests, support for binary packages and more regular +releases. Present Day diff -urNa sudo-1.8.19/doc/LICENSE sudo-1.8.19p1/doc/LICENSE --- sudo-1.8.19/doc/LICENSE Sun Dec 18 06:52:06 2016 +++ sudo-1.8.19p1/doc/LICENSE Tue Dec 20 10:28:49 2016 @@ -1,6 +1,6 @@ Sudo is distributed under the following license: - Copyright (c) 1994-1996, 1998-2015 + Copyright (c) 1994-1996, 1998-2016 Todd C. Miller Permission to use, copy, modify, and distribute this software for any diff -urNa sudo-1.8.19/plugins/sudoers/defaults.c sudo-1.8.19p1/plugins/sudoers/defaults.c --- sudo-1.8.19/plugins/sudoers/defaults.c Sun Dec 18 06:52:23 2016 +++ sudo-1.8.19p1/plugins/sudoers/defaults.c Tue Dec 20 10:28:49 2016 @@ -912,7 +912,7 @@ debug_return_bool(true); } for (fac = facilities; fac->name != NULL; fac++) { - if (strcmp(str, fac->name) != 0) { + if (strcmp(str, fac->name) == 0) { sd_un->ival = fac->num; debug_return_bool(true); } @@ -942,7 +942,7 @@ debug_return_bool(true); } for (pri = priorities; pri->name != NULL; pri++) { - if (strcmp(str, pri->name) != 0) { + if (strcmp(str, pri->name) == 0) { sd_un->ival = pri->num; debug_return_bool(true); }