[sudo-workers] sudo 1.8.3rc4 available
Todd C. Miller
Todd.Miller at courtesan.com
Wed Oct 5 09:00:00 EDT 2011
A new (and hopefully final) release candidate for sudo version 1.8.3
is now available. Sudo 1.8.3 is a bug fix release and does not
include any new features.
Major changes between sudo 1.8.3rc3 and 1.8.3rc4:
* Sudo will now work correctly with LDAP-based sudoers using TLS
or SSL on Debian systems.
Major changes between sudo 1.8.3rc2 and 1.8.3rc3:
* A symbol conflict with the pam_ssh_agent_auth PAM module that
would cause a crash been resolved.
* The inability to load a group provider plugin is no longer
a fatal error.
* A potential crash in the utmp handling code has been fixed.
* Two PAM session issues have been resolved. In previous versions
of sudo, the PAM session was opened as one user and closed as
another. Additionally, if no authentication was performed, the
PAM session would never be closed.
* Added new Italian translation from translationproject.org.
Major changes between sudo 1.8.3rc1 and 1.8.3rc2:
* Added Italian translation for sudo from translationproject.org
* Updated TROUBLESHOOTING file to match the current state of things.
* Fixes namespace collision that caused a crash with pam_ssh_agent_auth.
* Fixed some warnings on FreeBSD.
Major changes between sudo 1.8.2 and 1.8.3rc1:
* Fixed expansion of strftime() escape sequences in the "log_dir"
* Added new Esperanto translation from translationproject.org.
* Sudo will now use PAM by default on AIX 6 and higher.
* Added --enable-werror configure option for gcc's -Werror flag.
* Visudo no longer assumes all editors support the +linenumber
command line argument. It now uses a whitelist of editors known
to support the option.
* Fixed matching of network addresses when a netmask is specified
but the address is not the first one in the CIDR block.
* The configure script now check whether or not errno.h declares
the errno variable. Previously, sudo would always declare errno
itself for older systems that don't declare it in errno.h.
* The NOPASSWD tag is now honored for denied commands too, which
matches historic sudo behavior (prior to sudo 1.7.0).
* Sudo now honors the "DEREF" setting in ldap.conf which controls
how alias dereferencing is done during an LDAP search.
More information about the sudo-workers