Sudo version 1.6.5p2 now available

Todd C. Miller Todd.Miller at courtesan.com
Wed Jan 23 20:23:42 EST 2002


Sudo version 1.6.5 patchlevel 2 is now available (ftp sites listed
at the end).

Changes since sudo 1.6.5p1:

 o Older versions of BSDi have getifaddrs() but no freeifaddrs().

 o BSDi has a fake setreuid() as do certain versions of FreeBSD and NetBSD.

 o Ignore the return value of pam_setcred().  In Linux-PAM 0.75,
   pam_setcred() will return PAM_PERM_DENIED even if the setcred function
   of the module succeeds when pam_authenticate() has not been called.

 o Avoid giving PAM a NULL password response, use the empty string instead.
   This avoids a log warning when the user hits ^C at the password prompt
   when Linux-PAM is in use.  This also prevents older versions of
   Linux-PAM from dereferencing the NULL pointer.

 o The user's password was not zeroed after use when AIX authentication,
   BSD authentication, FWTK or PAM was in use.

Changes since sudo 1.6.5:

 o Visudo could access memory that was already freed.

 o If the skey.access file denied use of plaintext passwords sudo
   would exit instead of allowing the user to enter an S/Key.

sudo 1.6.5p2 distribution:
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.5p2.tar.gz

Master WWW site:
    http://www.sudo.ws/sudo/dist/

WWW Mirrors:
    http://sudo.stikman.com/</a> (Los Angeles, California, USA)
    http://mirage.informationwave.net/sudo/</a> (Fanwood, New Jersey, USA)
    http://www.c0r3dump.com/sudo/</a> (Edmonton, Canada)
    http://sudo.cdu.elektra.ru/</a> (Russia)

Master FTP sites:
    ftp.sudo.ws:/pub/sudo/
    ftp.cs.colorado.edu:/pub/sudo/

FTP Mirrors:
    ftp.cs.colorado.edu:/pub/sudo/ (Boulder, Colorado, USA)
    ftp.stikman.com:/pub/sudo/ (Los Angeles, California, USA)
    ftp.uu.net:/pub/security/sudo/ (Falls Church, Virginia, USA)
    ftp.tux.org:/pub/security/sudo/ (Beltsville, Maryland, USA)
    coast.cs.purdue.edu:/pub/tools/unix/sysutils/sudo/ (West Lafayette, Indiana, USA)
    ftp.uwsg.indiana.edu:/pub/sudo/ (Bloomington, Indiana, USA)
    sudobash.com:/pub/sudo/ (Ypsilanti, Michigan, USA)
    ftp.tamu.edu:/pub/mirrors/ftp.courtesan.com/ (College Station, Texas, USA)
    ftp.rge.com:/pub/admin/sudo/ (Rochester, New York, USA)
    mirage.informationwave.net:/sudo/ (Fanwood, New Jersey, USA)
    ftp.wiretapped.net:/pub/security/host-security/sudo/ (Australia)
    ftp.tuwien.ac.at:/utils/admin-tools/sudo/ (Austria)
    sunsite.ualberta.ca:/pub/Mirror/sudo/ (Alberta, Canada)
    ftp.csc.cuhk.edu.hk:/pub/packages/unix-tools/sudo/ (Hong Kong, China)
    ftp.eunet.cz:/pub/security/sudo/ (Czechoslovakia)
    ftp.umds.ac.uk:/pub/sudo/ (Great Britain)
    ftp.tvi.tut.fi:/pub/security/unix/sudo/ (Finland)
    ftp.lps.ens.fr:/pub/software/sudo/ (France)
    ftp.crihan.fr:/pub/security/sudo/ (France)
    ftp.rz.uni-osnabrueck.de:/pub/unix/security/sudo/ (Germany)
    ftp.win.ne.jp:/pub/misc/sudo/ (Japan)
    ftp.st.ryukoku.ac.jp:/pub/security/tool/sudo/ (Japan)
    ftp.eos.hokudai.ac.jp:/pub/misc/sudo/ (Japan)
    ftp.tokyonet.ad.jp:/pub/security/sudo/ (Japan)
    ftp.kobe-u.ac.jp:/pub/util/security/tool/sudo/ (Japan)
    ftp.cin.nihon-u.ac.jp:/pub/util/sudo/ (Japan)
    ftp.fujitsu.co.jp:/pub/misc/sudo/ (Japan)
    core.ring.gr.jp:/pub/misc/sudo/ (Japan)
    ftp.ring.gr.jp:/pub/misc/sudo/ (Japan)
    ftp.ayamura.org:/pub/sudo/ (Japan)
    ftp.iphil.net:/pub/sudo/ (Makati City, Philippines)
    ftp.icm.edu.pl:/vol/wojsyl5/sudo/ (Poland)
    ftp.assist.ro:/pub/mirrors/ftp.courtesan.com/pub/sudo/ (Romania)
    ftp.sai.msu.su:/pub/unix/security/ (Russia)
    ftp.cdu.elektra.ru:/pub/unix/security/sudo/ (Russia)
    ftp.mc.hik.se:/pub/unix/security/sudo/ (Sweden)
    ftp.sekure.net:/pub/sudo/ (Sweden)
    ftp.edu.tw:/UNIX/sudo/ (Taiwan)
    ftp.comu.edu.tr:/pub/linux/prog/sudo/ (Turkey)



More information about the sudo-announce mailing list