[sudo-announce] sudo 1.9.1 released

[Todd C. Miller]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Sudo 1.9.1 is now available, this is primarily a bug fix release.

Source:
    https://www.sudo.ws/dist/sudo-1.9.1.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.9.1.tar.gz

SHA256 checksum:
    294116cefe10a02773917fc7440d8384b925955bc96a6e0eaa1977c83b34adff
MD5 checksum:
    fd95682cbbe929fda7bbe93730934c98

Binary packages:
    https://www.sudo.ws/download.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.9.1 and 1.9.0

 * Fixed an AIX-specific problem when I/O logging was enabled.
   The terminal device was not being properly set to raw mode.
   Bug #927.

 * Corrected handling of sudo_logsrvd connections without associated
   I/O log data.  This fixes support for RejectMessage as well as
   AcceptMessage when the expect_iobufs flag is not set.

 * Added an "iolog_path" entry to the JSON-format event log produced
   by sudo_logsrvd.  Previously, it was only possible to determine
   the I/O log file an event belonged to using sudo-format logs.

 * Fixed the bundle IDs for sudo-logsrvd and sudo-python macOS packages.

 * I/O log files produced by the sudoers plugin now clear the write
   bits on the I/O log timing file when the log is complete.  This
   is consistent with how sudo_logsrvd indicates that a log is
   complete.

 * The sudoreplay utility has a new "-F" (follow) command line
   option to allow replaying a session that is still in progress,
   similar to "tail -f".

 * The @include and @includedir directives can be used in sudoers
   instead of #include and #includedir.  In addition, include paths
   may now have embedded white space by either using a double-quoted
   string or escaping the space characters with a backslash.

 * Fixed some Solaris 11.4 compilation errors.

 * When running a command in a pty, sudo will no longer try to
   suspend itself if the user's tty has been revoked (for instance
   when the parent ssh daemon is killed).  This fixes a bug where
   sudo would continuously suspend the command (which would succeed),
   then suspend itself (which would fail due to the missing tty)
   and then resume the command.

 * If sudo's event loop fails due to the tty being revoked, remove
   the user's tty events and restart the event loop (once).  This
   fixes a problem when running "sudo reboot" in a pty on some
   systems.  When the event loop exited unexpectedly, sudo would
   kill the command running in the pty, which in the case of "reboot",
   could lead to the system being in a half-rebooted state.

 * Fixed a regression introduced in sudo 1.8.23 in the LDAP and
   SSSD back-ends where a missing sudoHost attribute was treated
   as an "ALL" wildcard value.  A sudoRole with no sudoHost attribute
   is now ignored as it was prior to version 1.8.23.

 * The audit plugin API has been changed slightly.  The sudo front-end
   now audits an accept event itself after all approval plugins are
   run and the I/O logging plugins (if any) are opened.  This makes
   it possible for an audit plugin to only log a single overall
   accept event if desired.

 * The sudoers plugin can now be loaded as an audit plugin.  Logging
   of successful commands is now performed in the audit plugin's
   accept function.  As a result, commands are now only logged if
   allowed by sudoers and all approval plugins.  Commands rejected
   by an approval plugin are now also logged by the sudoers plugin.

 * Romanian translation for sudo and sudoers from translationproject.org.

 * Fixed a regression introduced in sudo 1.9.0 where sudoedit did
   not remove its temporary files after installing them.  Bug #929.

 * Fixed a regression introduced in sudo 1.9.0 where the iolog_file
   setting in sudoers and sudo_logsrvd.conf caused an error if the
   file name ended in six or more X's.
-----BEGIN PGP SIGNATURE-----
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=PvXm
-----END PGP SIGNATURE-----