sudo 1.7.2p7-3 (Vine5 updates)

git-svn-id: http://trac.vinelinux.org/repos/projects/specs@3394 ec354946-7b23-47d6-9f5a-488ba84defc7

s/sudo/sudo-vl.spec

@@ -2,7 +2,7 @@ Summary: Allows command execution as root for specified users
 Summary(ja): スーパーユーザ権限でのコマンドの実行
 Name: sudo
 Version: 1.7.2p7
-Release: 2%{?_dist_release}
+Release: 3%{?_dist_release}
 License: ISC-style
 Group: Applications/System
 URL: http://www.sudo.ws/
@@ -17,7 +17,8 @@ Patch4: sudo-1.7.1-envdebug.patch
 Patch5: sudo-1.7.1-libtool.patch
 # security
 Patch100: sudo-1.7.2p7_CVE-2010-2956.patch
-
+Patch110: sudo-1.7.2p7_CVE-2011-0010.patch
+Patch111: sudo-1.7.2p7_user_in_group.patch
 
 Buildroot: %{_tmppath}/%{name}-%{version}-%{release}-root
 BuildRequires: pam-devel
@@ -50,6 +51,8 @@ sudo は、特定のユーザや特定のグループに所属するユーザが
 %patch5 -p1 -b .libtool
 
 %patch100 -p1 -b .CVE-2010-2956
+%patch110 -p1 -b .CVE-2011-0010
+%patch111 -p1 -b .user_in_group
 
 libtoolize --force && rm acsite.m4 && mv aclocal.m4 acinclude.m4 && autoreconf
 
@@ -126,6 +129,9 @@ rm -rf $RPM_BUILD_ROOT
 /bin/chmod 0440 /etc/sudoers || :
 
 %changelog
+* Thu Feb 10 2011 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.7.2p7-3
+- add patch110,111 for fix CVE-2011-0010 ("-g" option)
+
 * Wed Sep  8 2010 Satoshi IWAMOTO <satoshi.iwamoto@nifty.ne.jp> 1.7.2p7-2
 - add Patch100 for fix CVE-2010-2956 (sudo Runas)
 - add _smp_mflags flag into make section