[sudo-workers] sudo 1.8.3rc5 available

Todd C. Miller Todd.Miller at courtesan.com
Tue Oct 11 14:14:13 EDT 2011

A new (and hopefully final) release candidate for sudo version 1.8.3
is now available.  Sudo 1.8.3 is a bug fix release and does not
include any new features.


Binary packages:

Major changes between sudo 1.8.3rc4 and 1.8.3rc5:

 * Added new Japanese translation from translationproject.org.

 * The LOGNAME, USER and USERNAME environment variables are preserved
   correctly again in sudoedit mode.

 * The group list is now reallocated correctly when the initial size
   guess is too small.

Major changes between sudo 1.8.3rc3 and 1.8.3rc4:

 * Sudo will now work correctly with LDAP-based sudoers using TLS
   or SSL on Debian systems.

Major changes between sudo 1.8.3rc2 and 1.8.3rc3:

 * A symbol conflict with the pam_ssh_agent_auth PAM module that
   would cause a crash been resolved.

 * The inability to load a group provider plugin is no longer
   a fatal error.

 * A potential crash in the utmp handling code has been fixed.

 * Two PAM session issues have been resolved.  In previous versions
   of sudo, the PAM session was opened as one user and closed as
   another.  Additionally, if no authentication was performed, the
   PAM session would never be closed.

 * Added new Italian translation from translationproject.org.

Major changes between sudo 1.8.3rc1 and 1.8.3rc2:

 * Added Italian translation for sudo from translationproject.org

 * Updated TROUBLESHOOTING file to match the current state of things.

 * Fixes namespace collision that caused a crash with pam_ssh_agent_auth.

 * Fixed some warnings on FreeBSD.

Major changes between sudo 1.8.2 and 1.8.3rc1:

 * Fixed expansion of strftime() escape sequences in the "log_dir"
   sudoers setting.

 * Added new Esperanto translation from translationproject.org.

 * Sudo will now use PAM by default on AIX 6 and higher.

 * Added --enable-werror configure option for gcc's -Werror flag.

 * Visudo no longer assumes all editors support the +linenumber
   command line argument.  It now uses a whitelist of editors known
   to support the option.

 * Fixed matching of network addresses when a netmask is specified
   but the address is not the first one in the CIDR block.

 * The configure script now check whether or not errno.h declares
   the errno variable.  Previously, sudo would always declare errno
   itself for older systems that don't declare it in errno.h.

 * The NOPASSWD tag is now honored for denied commands too, which
   matches historic sudo behavior (prior to sudo 1.7.0).

 * Sudo now honors the "DEREF" setting in ldap.conf which controls
   how alias dereferencing is done during an LDAP search.

More information about the sudo-workers mailing list