openSUSE Build Service

Overview Repositories Revisions Requests Users Attributes Meta

Revisions of sudo

buildservice-autocommit accepted request 1136065 from

Otto Hollmann (ohollmann) 4 months ago (revision 252)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1136064 from

Otto Hollmann (ohollmann) 4 months ago (revision 251)

- Update to 1.9.15p5:
  * Fixed evaluation of the lecture, listpw, verifypw, and fdexec sudoers
    Defaults settings when used without an explicit value. Previously, if
    specified without a value they were evaluated as boolean false, even when
    the negation operator ('!') was not present.
  * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP netgroup queries
    using the NETGROUP_BASE setting from being performed.
  * Sudo will now transparently rename a user's lecture file from the older
    name-based path to the newer user-ID-based path. GitHub issue #342.
  * Fixed a bug introduced in sudo 1.9.15 that could cause a memory allocation
    failure if sysconf(_SC_LOGIN_NAME_MAX) fails. Bug #1066.

buildservice-autocommit accepted request 1134040 from

Otto Hollmann (ohollmann) 4 months ago (revision 250)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1134033 from

Otto Hollmann (ohollmann) 4 months ago (revision 249)

- For existing products (SLE15-SP* and older) keep using /etc and don't
  switch to /usr/etc. So only SLES16/ALP, Tumbleweed and newer products
  will use both /etc and /usr/etc locations.

- Update to 1.9.15p4:
  * Fixed a bug introduced in sudo 1.9.15 that could prevent a user’s
    privileges from being listed by sudo -l if the sudoers entry
    in /etc/nsswitch.conf contains [SUCCESS=return]. This did not affect the
    ability to run commands via sudo. Bug #1063.
- Update to 1.9.15p3:
  * Always disable core dumps when sudo sends itself a fatal signal. Fixes a
    problem where sudo could potentially dump core dump when it re-sends the
    fatal signal to itself. This is only an issue if the command   * received
    a signal that would normally result in a core dump but the command did
    not actually dump core.
  * Fixed a bug matching a command with a relative path name when the sudoers
    rule uses shell globbing rules for the path name. Bug #1062.
  * Permit visudo to be run even if the local host name is not set. GitHub
    issue #332.
  * Fixed an editing error introduced in sudo 1.9.15 that could prevent
    sudoreplay from replaying sessions correctly. GitHub issue #334.
  * Fixed a bug introduced in sudo 1.9.15 where sudo -l > /dev/null could hang
    on Linux systems. GitHub issue #335.
  * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges specified
    in sudoers were not applied to the command being run.

buildservice-autocommit accepted request 1128361 from

Otto Hollmann (ohollmann) 5 months ago (revision 248)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1128140 from

Otto Hollmann (ohollmann) 5 months ago (revision 247)

- Update to 1.9.15p2:
  * Fixed a bug on BSD systems where sudo would not restore the
    terminal settings on exit if the terminal had parity enabled.
    GitHub issue #326.
- Update to 1.9.15p1:
  * Fixed a bug introduced in sudo 1.9.15 that prevented LDAP-based
    sudoers from being able to read the ldap.conf file.
    GitHub issue #325.
- Update to 1.9.15:
  * Fixed an undefined symbol problem on older versions of macOS
    when "intercept" or "log_subcmds" are enabled in sudoers.
    GitHub issue #276.
  * Fixed "make check" failure related to getpwent(3) wrapping
    on NetBSD.
  * Fixed the warning message for "sudo -l command" when the command
    is not permitted.  There was a missing space between "list" and
    the actual command due to changes in sudo 1.9.14.
  * Fixed a bug where output could go to the wrong terminal if
    "use_pty" is enabled (the default) and the standard input, output
    or error is redirected to a different terminal.  Bug #1056.
  * The visudo utility will no longer create an empty file when the
    specified sudoers file does not exist and the user exits the
    editor without making any changes.  GitHub issue #294.
  * The AIX and Solaris sudo packages on www.sudo.ws now support
    "log_subcmds" and "intercept" with both 32-bit and 64-bit
    binaries.  Previously, they only worked when running binaries
    with the same word size as the sudo binary.  GitHub issue #289.
  * The sudoers source is now logged in the JSON event log.  This
    makes it possible to tell which rule resulted in a match.
  * Running "sudo -ll command" now produces verbose output that

Otto Hollmann (ohollmann) accepted request 1127862 from

Dominique Leuenberger (dimstar) 5 months ago (revision 246)

- Package/ship empty /etc/sudoers.d directory for admins to
  discover where to put their won config.

Otto Hollmann (ohollmann) accepted request 1114961 from

Otto Hollmann (ohollmann) 7 months ago (revision 245)

- Introduce optional wheel and sudo group policies as separate packages
  (bsc#1203978, jsc#PED-260)

- Install config files into /usr/etc and read from both location:
  /etc and /usr/etc (bsc#1205118)

buildservice-autocommit accepted request 1110628 from

Otto Hollmann (ohollmann) 8 months ago (revision 244)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1110618 from

Otto Hollmann (ohollmann) 8 months ago (revision 243)

- Update to 1.9.14p3:
  * Fixed a crash with Python 3.12 when the sudo Python python is unloaded.
    This only affects make check for the Python plugin.
  * Adapted the sudo Python plugin test output to match Python 3.12.
- Update to 1.9.14p2:
  * Fixed a crash on Linux systems introduced in version 1.9.14 when running a
    command with a NULL argv[0] if log_subcmds or intercept is enabled in
    sudoers.
  * Fixed a problem with "stair-stepped" output when piping or redirecting the
    output of a sudo command that takes user input when running a command in
    a pseudo-terminal.
  * Fixed a bug introduced in sudo 1.9.14 that affects matching sudoers rules
    containing a Runas_Spec with an empty Runas user. These rules should only
    match when sudo’s -g option is used but were matching even without the -g
    option. #290.

buildservice-autocommit accepted request 1100258 from

Otto Hollmann (ohollmann) 9 months ago (revision 242)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1098344 from

Paolo Stivanin (polslinux) 9 months ago (revision 241)

- Update to 1.9.14p1:
  * Fixed an invalid free bug in sudo_logsrvd that was introduced
    in version 1.9.14 which could cause sudo_logsrvd to crash.
  * The sudoers plugin no longer tries to send the terminal name
    to the log server when no terminal is present.  This bug was
    introduced in version 1.9.14.
  * Fixed a bug where if the "intercept" or "log_subcmds" sudoers
    option was enabled and a sub-command was run where the first
    entry of the argument vector didn't match the command being run.
    This resulted in commands like "sudo su -" being killed due to
    the mismatch.  Bug #1050.
  * The sudoers plugin now canonicalizes command path names before
    matching (where possible).  This fixes a bug where sudo could
    execute the wrong path if there are multiple symbolic links with
    the same target and the same base name in sudoers that a user is
    allowed to run.  GitHub issue #228.
  * Improved command matching when a chroot is specified in sudoers.
    The sudoers plugin will now change the root directory id needed
    before performing command matching.  Previously, the root directory
    was simply prepended to the path that was being processed.
  * When NETGROUP_BASE is set in the ldap.conf file, sudo will now
    perform its own netgroup lookups of the host name instead of
    using the system innetgr(3) function.  This guarantees that user
    and host netgroup lookups are performed using  the same LDAP
    server (or servers).
  * Fixed a bug introduced in sudo 1.9.13 that resulted in a missing
    " ; " separator between environment variables and the command
    in log entries.
  * The visudo utility now displays a warning when it ignores a file
    in an include dir such as /etc/sudoers.d.

buildservice-autocommit accepted request 1077888 from

Factory Maintainer (factory-maintainer) about 1 year ago (revision 240)

baserev update by copy to link target

Otto Hollmann (ohollmann) accepted request 1077512 from

Michal Koutný (mkoutny) about 1 year ago (revision 239)

- sudo.pamd: Use common-session-nonlogin for >15 codestreams
  More info in https://github.com/SUSE/pam-config/pull/16

buildservice-autocommit accepted request 1072565 from

Dirk Mueller (dirkmueller) about 1 year ago (revision 238)

baserev update by copy to link target

Dirk Mueller (dirkmueller) committed about 1 year ago (revision 237)

- Update to 1.9.13p2 (bsc#1208595, CVE-2023-27320):
    This bug was introduced in sudo 1.9.8.

buildservice-autocommit accepted request 1070288 from

Jason Sikes (jsikes) about 1 year ago (revision 236)

baserev update by copy to link target

Jason Sikes (jsikes) accepted request 1070277 from

Jason Sikes (jsikes) about 1 year ago (revision 235)

Update to 1.9.13p3! Enjoy.

buildservice-autocommit accepted request 1068081 from

Jason Sikes (jsikes) about 1 year ago (revision 234)

baserev update by copy to link target

Jason Sikes (jsikes) accepted request 1068080 from

Jason Sikes (jsikes) about 1 year ago (revision 233)

Update that fixes bsc1208595! Enjoy.

Displaying revisions 1 - 20 of 252

Places

Revisions of sudo

Places