[sudo-workers] sudo 1.8.15b1 released
Todd C. Miller
Todd.Miller at courtesan.com
Thu Sep 10 17:31:14 MDT 2015
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
The first beta version of sudo 1.8.15 is now available.
In addition to bug fixes, sudo 1.8.15 includes changes to how the
time stamp files are locked which could use some more extensive
testing. The upshot is that sudo can now be used multiple time s
in a pipeline even when a password is required and the user will
only be prompted once.
Source:
http://www.sudo.ws/sudo/dist/beta/sudo-1.8.15b1.tar.gz
ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.8.15b1.tar.gz
SHA256 checksum:
ba6081941074849d4efed3e39c0ccd86b90216b719e32f9a8dc6b6c58c6a7aa7
MD5 checksum:
5110e8492d696ae07a1e06c61c09ee25
Binary packages:
http://www.sudo.ws/sudo/dist/beta/packages/index.html#binary
For a list of download mirror sites, see:
http://www.sudo.ws/sudo/download_mirrors.html
Sudo web site:
http://www.sudo.ws/sudo/
Sudo web site mirrors:
http://www.sudo.ws/sudo/mirrors.html
Major changes between sudo 1.8.15b1 and 1.8.14p3:
* Fixed a bug that prevented sudo from building outside the source tree
on some platforms. Bug #708.
* Fixed the location of the sssd library in the RHEL/Centos packages.
Bug #710.
* Fixed a build problem on systems that don't implicitly include
sys/types.h from other header files. Bug #711.
* Fixed a problem on Linux using containers where sudo would ignore
signals sent by a process in a different container.
* Sudo now refuses to run a command if the PAM session module
returns an error.
* When editing files with sudoedit, symbolic links will no longer
be followed by default. The old behavior can be restored by
enabling the sudoedit_follow option in sudoers or on a per-command
basis with the FOLLOW and NOFOLLOW tags. Bug #707.
* Fixed a bug introduced in version 1.8.14 that caused the last
valid editor in the sudoers "editor" list to be used by visudo
and sudoedit instead of the first. Bug #714.
* Fixed a bug in visudo that prevented the addition of a final
newline to edited files without one.
* Fixed a bug decoding certain base64 digests in sudoers when the
intermediate format included a '=' character.
* Individual records are now locked in the time stamp file instead
of the entire file. This allows sudo to avoid prompting for a
password multiple times on the same terminal when used in a
pipeline. In other words, "sudo cat foo | sudo grep bar" now
only prompts for the password once. Previously, both sudo
processes would prompt for a password, often making it impossible
to enter.
* Fixed a bug where sudo would fail to run commands as a non-root
user on systems that lack both setresuid() and setreuid().
Bug #713.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
iEYEARECAAYFAlXyEr0ACgkQWonfon7kcMRSSwCgyXSixZW3SkRCx/JNP1QimxBp
6oIAoJE++yzXSURFOmrlhcxWMna0Y+Vg
=69cM
-----END PGP SIGNATURE-----
More information about the sudo-workers
mailing list