notbugAs an Amazon Associate I earn from qualifying purchases.
Want a good read? Try FreeBSD Mastery: Jails (IT Mastery Book 15)
Want a good monitor light? See my photosAll times are UTC
Ukraine

Bot filter coming soon

To deter bots pegging the database CPU to 100%, a bot testing filter to be added to the website. This should not affect newsfeeds etc. Anubis seems light-weight - it is already in use within the FreeBSD Project. This notice is just a heads up in case you see something odd. This notice will be updated after Anubis is installed.

Port details on branch 2025Q2
sudo Allow others to run commands as root
1.9.17p1 security on this many watch lists=0 search for ports that depend on this port An older version of this port was marked as vulnerable. Find issues related to this port Report an issue related to this port View this port on Repology. pkg-fallout Package not present on quarterly.This is expected early in the quarter (because the new packaage repo has not been built yet.). Otherwise, this missing version is most likely a FreshPorts error.
Maintainer: garga@FreeBSD.org search for ports maintained by this maintainer
Port Added: 2025-07-01 18:06:10
Last Update: 2025-07-01 18:04:05
Commit Hash: c339266
License: sudo
WWW:
https://www.sudo.ws/
Description:
This is the CU version of sudo. Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done.
Homepage    cgit ¦ Codeberg ¦ GitHub ¦ GitLab ¦ SVNWeb - no subversion history for this port

Manual pages:
FreshPorts has no man page information for this port.
pkg-plist: as obtained via: make generate-plist
There is no configure plist information for this port.
Dependency lines:
  • sudo>0:security/sudo
To install the port:
cd /usr/ports/security/sudo/ && make install clean
To add the package, run one of these commands:
  • pkg install security/sudo
  • pkg install sudo
NOTE: If this package has multiple flavors (see below), then use one of them instead of the name specified above.
PKGNAME: sudo
Package flavors (<flavor>: <package>)
  • default: sudo
  • sssd: sudo-sssd
distinfo:
TIMESTAMP = 1751356446 SHA256 (sudo-1.9.17p1.tar.gz) = ff607ea717072197738a78f778692cd6df9a7e3e404565f51de063ca27455d32 SIZE (sudo-1.9.17p1.tar.gz) = 5449076

Packages (timestamps in pop-ups are UTC):
sudo
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.9.17p11.9.17p11.9.5p11.9.16p2_11.9.17p1-1.9.4p2-
FreeBSD:13:quarterly1.9.16p2_11.9.17p11.9.14p31.9.16p2_11.9.17p11.9.15p51.9.15p51.9.15p5
FreeBSD:14:latest1.9.16p2_11.9.17p11.9.12p11.9.16p2_11.9.17p11.9.13p3-1.9.13p3
FreeBSD:14:quarterly1.9.17p11.9.17p1-1.9.16p2_11.9.17p11.9.15p51.9.15p51.9.15p5
FreeBSD:15:latest1.9.16p2_11.9.17n/a1.9.16p2_1n/a1.9.15p5_31.9.15p5_31.9.15p5_4
 

sudo-sssd
ABIaarch64amd64armv6armv7i386powerpcpowerpc64powerpc64le
FreeBSD:13:latest1.9.17p11.9.17p1-1.9.16p2_11.9.17p1---
FreeBSD:13:quarterly1.9.16p2_11.9.17p1-1.9.16p2_11.9.17p1---
FreeBSD:14:latest1.9.16p2_11.9.17p1-1.9.16p2_11.9.17p1---
FreeBSD:14:quarterly1.9.17p11.9.17p1-1.9.16p2_11.9.17p1---
FreeBSD:15:latest1.9.16p2_11.9.17n/a1.9.16p2_1n/a---
 

Dependencies
NOTE: FreshPorts displays only information on required and default dependencies. Optional dependencies are not covered.
Build dependencies:
  1. pkgconf>=1.3.0_1 : devel/pkgconf
  2. gettext-runtime>=0.22_1 : devel/gettext-runtime
  3. msgfmt : devel/gettext-tools
Library dependencies:
  1. libintl.so : devel/gettext-runtime
There are no ports dependent upon this port

Configuration Options:
===> The following configuration options are available for sudo-1.9.17p1: AUDIT=on: Enable BSM audit support DISABLE_AUTH=off: Do not require authentication by default DISABLE_ROOT_SUDO=off: Do not allow root to run sudo DOCS=on: Build and/or install documentation EXAMPLES=on: Build and/or install examples INSULTS=off: Enable insults on failures LDAP=off: LDAP protocol support NLS=on: Native Language Support NOARGS_SHELL=off: Run a shell if no arguments are given OPIE=off: Enable one-time passwords (no PAM support) PAM=on: Pluggable authentication module support PYTHON=off: Enable python plugin support SSL=on: Use OpenSSL TLS and SHA2 functions ====> Enable Kerberos 5 authentication (no PAM support): you can only select none or one of them GSSAPI_BASE=off: GSSAPI support via base system (needs Kerberos) GSSAPI_HEIMDAL=off: GSSAPI support via security/heimdal GSSAPI_MIT=off: GSSAPI support via security/krb5 ===> Use 'make config' to modify these settings
Options name:
security_sudo
USES:
cpe libtool pkgconfig gettext ssl
FreshPorts was unable to extract/find any pkg message
Master Sites:
Expand this list (23 items)
Collapse this list.
  1. ftp://ftp.arcane-networks.fr/pub/mirrors/sudo/
  2. ftp://ftp.cin.nihon-u.ac.jp/pub/misc/sudo/
  3. ftp://ftp.cs.tu-berlin.de/pub/misc/sudo/
  4. ftp://ftp.in2p3.fr/pub/sudo/
  5. ftp://ftp.informatik.uni-hamburg.de/pub/os/unix/utils/sudo/
  6. ftp://ftp.st.ryukoku.ac.jp/pub/security/tool/sudo/
  7. ftp://ftp.sudo.ws/pub/sudo/
  8. ftp://ftp.tuwien.ac.at/utils/admin-tools/sudo/
  9. ftp://ftp.twaren.net/Unix/Security/Sudo/
  10. ftp://ftp.usbm.de/pub/sudo/
  11. ftp://ftp.uwsg.indiana.edu/pub/security/sudo/
  12. ftp://mirror.cdmon.com/pub/sudo/
  13. ftp://obsd.isc.org/pub/sudo/
  14. ftp://plier.ucar.edu/pub/sudo/
  15. ftp://sunsite.icm.edu.pl/packages/sudo/
  16. ftp://sunsite.ualberta.ca/pub/Mirror/sudo/
  17. ftp://zoot.tele.dk/pub/sudo/
  18. http://ftp.arcane-networks.fr/pub/mirrors/sudo/
  19. http://ftp.twaren.net/Unix/Security/Sudo/
  20. http://sudo-ftp.basemirror.de/
  21. http://sudo.cybermirror.org/
  22. http://sudo.p8ra.de/sudo/dist/
  23. https://www.sudo.ws/sudo/dist/
Collapse this list.

Number of commits found: 2

Commit History - (may be incomplete: for full details, see links to repositories near top of page)
CommitCreditsLog message
1.9.17p1
01 Jul 2025 18:04:05
commit hash: c339266c40e5c0c9b0be894d76a6797714be45f3commit hash: c339266c40e5c0c9b0be894d76a6797714be45f3commit hash: c339266c40e5c0c9b0be894d76a6797714be45f3commit hash: c339266c40e5c0c9b0be894d76a6797714be45f3 files touched by this commit
Matthias Andree (mandree) search for other commits by this committer
Author: FiLiS
security/sudo: security update to 1.9.17p1

This update fixes two security vulnerabilities that allow
privilege escalation.

https://www.sudo.ws/security/advisories/host_any/
https://www.sudo.ws/security/advisories/chroot_bug/
https://www.stratascale.com/vulnerability-alert-CVE-2025-32462-sudo-host
https://www.stratascale.com/vulnerability-alert-CVE-2025-32463-sudo-chroot

PR:             287938
Approved by:	garga@ (maintainer)
Security:       24f4b495-56a1-11f0-9621-93abbef07693
Security:       CVE-2025-32462
Security:       CVE-2025-32463
MFH:		2025Q2
MFH:		2025Q3 (as needed)

(cherry picked from commit 5f6cec81009cc54c2c7c0817563d95cba32994ca)
1.9.17
01 Jul 2025 18:04:05
commit hash: d4ea7d73d576852d8e3ea655961df8930c051f22commit hash: d4ea7d73d576852d8e3ea655961df8930c051f22commit hash: d4ea7d73d576852d8e3ea655961df8930c051f22commit hash: d4ea7d73d576852d8e3ea655961df8930c051f22 files touched by this commit This port version is marked as vulnerable.
Matthias Andree (mandree) search for other commits by this committer
Author: Cy Schubert
security/sudo: Update to 1.9.17

PR:		287709
(cherry picked from commit 4194739e5ecf5edccd135327273268b13b0693ad)

Number of commits found: 2