[sudo-workers] sudo 1.8.13b4 released
Todd C. Miller
Todd.Miller at courtesan.com
Fri Mar 6 10:01:00 MST 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The fourth beta version of sudo 1.8.13 is now available. This is
primarily a bug fix release but it also includes support for
fine-grained control over whether mail will be sent when a user
runs a specific command.
Source:
http://www.sudo.ws/sudo/dist/beta/sudo-1.8.13b4.tar.gz
ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.8.13b4.tar.gz
SHA256 checksum:
b441dbabfd16adf83e093f7c680d0dd8ff40fd50fd78b52ba9c3ffdee08eae6c
MD5 checksum:
bbc65545ef7fce0401d4c51e53900531
Binary packages:
http://www.sudo.ws/sudo/dist/beta/packages/index.html#binary
For a list of download mirror sites, see:
http://www.sudo.ws/sudo/download_mirrors.html
Sudo web site:
http://www.sudo.ws/sudo/
Sudo web site mirrors:
http://www.sudo.ws/sudo/mirrors.html
Major changes between sudo 1.8.13b4 and 1.8.13b3:
* Fixed a symbol name collision with systems that have their own
sha2 implementation. This fixes a problem where PAM could use
the wrong sha2 implementation on Solaris systems configured to
use SHA512 for passwords.
* Updated translations from translationproject.org.
* Added --disable-weak-symbols configure option to disable the use
of weak symbols in libsudo_util.
Major changes between sudo 1.8.13b3 and 1.8.13b2:
* Fixed a typo that prevented the SIGPIPE handler from being
restored before returning from tgetpass().
* Fixed the logic for verifypw/listpw all in sudoers LDAP and sssd.
* Sudo now uses futimens() and utimensat() instead of futimes()
and utimes().
Major changes between sudo 1.8.13b2 and 1.8.13b1:
* Updated sudo's snprintf() replacement for C99.
* On AIX, the value of auth_type in /etc/security/login.cfg is
used to determine whether to use LAM or PAM unless either the
--with-pam or --with-aixauth configure flags were specified.
* Fixed a "PAM conversation error" message on AIX when the user
presses ^C at the Password: prompt.
* Sudo now checks the return value of the clock_gettime() function
and falls back to gettimeofday() if the former fails.
Major changes between sudo 1.8.13b1 and 1.8.12:
* The examples directory is now a subdirectory of the doc dir to
conform to Debian guidelines. Bug #682.
* Fixed a compilation error for siglist.c and signame.c on some
systems. Bug #686
* Weak symbols are now used for sudo_warn_gettext() and
sudo_warn_strerror() in libsudo_util to avoid link errors
when -Wl,--no-undefined is used in LDFLAGS.
* Fixed a bug in sudo's mkstemps() replacement function that
prevented the file extension from being preserved in sudoedit.
* A new mail_all_cmnds sudoers flag will send mail when a user runs
a command (or tries to). The behavior of the mail_always flag has
been restored to always send mail when sudo is run.
* New "MAIL" and "NOMAIL" command tags have been added to toggle
mail sending behavior on a per-command (or Cmnd_Alias) basis.
* Fixed matching of empty passwords when sudo is configured to
use passwd (or shadow) file authentication on systems where the
crypt() function returns NULL for invalid salts.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlT53UQACgkQWonfon7kcMQLDQCfdWhfr2m6tMqDwxXdAlkI6qZj
dtUAoKGfWfT0Ndp62Q1F4j3GeY6tW9v0
=6qQ0
-----END PGP SIGNATURE-----
More information about the sudo-workers
mailing list