[sudo-announce] sudo 1.8.15 released [revised]

[Todd C. Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

[Re-sending with the proper checksum values, the previous announcement
 included the checksums for sudo 1.8.5 not 1,.8.15, oops.]

Sudo version 1.8.15 is now available.  In addition to bug fixes,
sudo 1.8.15 includes changes to how the time stamp files are locked.
As a result of these changes, when sudo is used multiple times in
a pipeline and a password is required, the user will only need to
enter the password once.  It also includes finer grained control
over how files are opened with sudoedit.

Source:
    http://www.sudo.ws/dist/sudo-1.8.15.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.15.tar.gz

SHA256 checksum:
    4316381708324da8b6cb151f655c1a11855207c7c02244d8ffdea5104d7cc308
MD5 checksum:
    7cf6b9b76d0478a572432bed481dd7b5

Binary packages:
    http://www.sudo.ws/download.html#binary

For a list of download mirror sites, see:
    http://www.sudo.ws/download_mirrors.html

Sudo web site:
    http://www.sudo.ws/

Sudo web site mirrors:
    http://www.sudo.ws/mirrors.html

Major changes between sudo 1.8.15 and 1.8.14p3:

 * Fixed a bug that prevented sudo from building outside the source tree
   on some platforms.  Bug #708.

 * Fixed the location of the sssd library in the RHEL/Centos packages.
   Bug #710.

 * Fixed a build problem on systems that don't implicitly include
   sys/types.h from other header files.  Bug #711.

 * Fixed a problem on Linux using containers where sudo would ignore
   signals sent by a process in a different container.

 * Sudo now refuses to run a command if the PAM session module
   returns an error.

 * When editing files with sudoedit, symbolic links will no longer
   be followed by default.  The old behavior can be restored by
   enabling the sudoedit_follow option in sudoers or on a per-command
   basis with the FOLLOW and NOFOLLOW tags.  Bug #707.

 * Fixed a bug introduced in version 1.8.14 that caused the last
   valid editor in the sudoers "editor" list to be used by visudo
   and sudoedit instead of the first.  Bug #714.

 * Fixed a bug in visudo that prevented the addition of a final
   newline to edited files without one.

 * Fixed a bug decoding certain base64 digests in sudoers when the
   intermediate format included a '=' character.

 * Individual records are now locked in the time stamp file instead
   of the entire file.  This allows sudo to avoid prompting for a
   password multiple times on the same terminal when used in a
   pipeline.  In other words, "sudo cat foo | sudo grep bar" now
   only prompts for the password once.  Previously, both sudo
   processes would prompt for a password, often making it impossible
   to enter.

 * Fixed a bug where sudo would fail to run commands as a non-root
   user on systems that lack both setresuid() and setreuid().
   Bug #713.

 * Fixed a bug introduced in sudo 1.8.14 that prevented visudo from
   re-editing the correct file when a syntax error was detected.

 * Fixed a bug where sudo would not relay a SIGHUP signal to the
   command when the terminal is closed and the command is not run
   in its own pseudo-tty.  Bug #719

 * If some, but not all, of the LOGNAME, USER or USERNAME environment
   variables have been preserved from the invoking user's environment,
   sudo will now use the preserved value to set the remaining variables
   instead of using the runas user.  This ensures that if, for example,
   only LOGNAME is present in the env_keep list, that sudo will not
   set USER and USERNAME to the runas user.

*  When the command sudo is running dies due to a signal, sudo will
   now send itself that same signal with the default signal handler
   installed instead of exiting.  The bash shell appears to ignore
   some signals, e.g. SIGINT, unless the command being run is killed
   by that signal.  This makes the behavior of commands run under
   sudo the same as without sudo when bash is the shell.  Bug #722

 * Slovak translation for sudo from translationproject.org.

 * Hungarian and Slovak translations for sudoers from translationproject.org.

 * Previously, when env_reset was enabled (the default) and the -s
   option was not used, the SHELL environment variable was set to the
   shell of the invoking user.  Now, when env_reset is enabled and
   the -s option is not used, SHELL is set based on the target user.

 * Fixed challenge/response style BSD authentication.

 * Added the sudoedit_checkdir Defaults option to prevent sudoedit
   from editing files located in a directory that is writable by
   the invoking user.

 * Added the always_query_group_plugin Defaults option to control
   whether groups not found in the system group database are passed
   to the group plugin.  Previously, unknown system groups were
   always passed to the group plugin.

 * When creating a new file, sudoedit will now check that the file's
   parent directory exists before running the editor.

 * Fixed the compiler stack protector test in configure for compilers
   that support -fstack-protector but don't actually have the ssp
   library available.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlY3ccwACgkQWonfon7kcMRwOQCfRnGYkB9HLj0fqgCMu+Aeea4J
ngEAn1w9ee3zXr7jlRfaociDBsFbuoLF
=wn3R
-----END PGP SIGNATURE-----