diff --git a/SOURCES/sudo-separator.patch b/SOURCES/sudo-separator.patch new file mode 100644 index 0000000..df4a89f --- /dev/null +++ b/SOURCES/sudo-separator.patch @@ -0,0 +1,11 @@ +diff -up ./lib/eventlog/eventlog.c.separator ./lib/eventlog/eventlog.c +--- ./lib/eventlog/eventlog.c.separator 2025-03-31 17:03:34.700244658 +0200 ++++ ./lib/eventlog/eventlog.c 2025-03-31 17:04:39.943669191 +0200 +@@ -176,6 +176,7 @@ new_logline(int event_type, int flags, s + sudo_lbuf_append_esc(&lbuf, LBUF_ESC_CNTRL, " %s", + evlog->env_add[i]); + } ++ sudo_lbuf_append(&lbuf, " ; "); + } + if (evlog->command != NULL) { + sudo_lbuf_append_esc(&lbuf, LBUF_ESC_CNTRL|LBUF_ESC_BLANK, diff --git a/SPECS/sudo.spec b/SPECS/sudo.spec index c3f0dea..6f4730e 100644 --- a/SPECS/sudo.spec +++ b/SPECS/sudo.spec @@ -1,7 +1,7 @@ Summary: Allows restricted root access for specified users Name: sudo Version: 1.9.5p2 -Release: 10%{?dist}.1 +Release: 10%{?dist}.2 License: ISC URL: https://www.sudo.ws @@ -48,6 +48,7 @@ Patch18: linker.patch Patch19: sudo-1.9.15-CVE-2023-42465.patch Patch20: sudo-1.9.17-CVE-2025-32462.patch +Patch21: sudo-separator.patch %description Sudo (superuser do) allows a system administrator to give certain @@ -103,6 +104,7 @@ BuildRequires: python3-devel %patch -P 19 -p1 -b .rowhammer %patch -P 20 -p1 -b .cve-host +%patch -P 21 -p1 -b .separator %build # Remove bundled copy of zlib @@ -277,6 +279,11 @@ EOF %attr(0644,root,root) %{_libexecdir}/sudo/python_plugin.so %changelog +* Mon Aug 18 2025 Stepan Broz - 1.9.5p2-10.2 +RHEL: 9.6.0.Z ERRATUM +- sudo missing spacing and separator in log when using "--preserve-env=list" +Resolves: RHEL-105595 + * Wed Jun 25 2025 Radovan Sroka - 1.9.5p2-10.1 RHEL 9.6.0.Z ERRATUM - CVE-2025-32462 sudo: LPE via host option