Accepting request 801234 from Base:System

OBS-URL: https://build.opensuse.org/request/show/801234
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/sudo?expand=0&rev=109

sudo-1.9.0rc2.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:9b21df2def88776be80d4815b231b9b208930f6b5b25e2e7ac9d0ff2d1c5158d
-size 3722476

sudo-1.9.0rc4.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:e8f79c4b672d0068e6c1f78f011f53b9e9de30a6cf63006e0a64c4bef827a970
+size 3744357

sudo.changes

@@ -1,3 +1,39 @@
+-------------------------------------------------------------------
+Thu May  7 12:14:26 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
+
+- Update to 1.9.0rc4
+  * Various spelling fixes. Bug #925.
+  * The struct passwd passed to PAM session modules is now looked up
+    by user name, not user-ID, when possible. Fixes a problem with
+    the pam_limits module and configurations where multiple user names
+    share the same ID. Debian bug #734752.
+  * Sudo command line options that take a value may only be specified
+    once. This is to help guard against problems caused by poorly
+    written scripts that invoke sudo with user-controlled input. Bug #924. 
+
+-------------------------------------------------------------------
+Wed May  6 07:37:58 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
+
+- Update to 1.9.0rc3
+  * The sudo-logsrvd package now installs a systemd service on Linux
+    distros that use systemd.
+  * The I/O plugin is now closed before the policy plugin on command
+    exit.
+  * When copying the edited files to the original path, sudoedit now
+    allocates any additional space needed before writing. Previously,
+    it could truncate the destination file if the file system was
+    full. Bug #922.
+  * Fixed a compilation issue with Python 3.8.
+  * Changed how TLS connections are made to the log server. Instead
+    of using a starttls type approach where TLS and plaintext
+    connections share the same point we now use separate ports for
+    plaintext and TLS connections. A (tls) flag can be specified after
+    the host:port to indicate that the connection should be secured
+    with TLS. This avoids a potention man-in-the-middle attack that
+    could cause the connection to be forced into plaintext mode.
+    Unfortunately, this change breaks compatibility with the
+    previous release candidates.
+
 -------------------------------------------------------------------
 Fri Apr 17 17:07:06 UTC 2020 - Kristyna Streitova <kstreitova@suse.com>
 

sudo.spec

@@ -22,7 +22,7 @@
 %define use_usretc 1
 %endif
 Name:           sudo
-Version:        1.9.0rc2
+Version:        1.9.0rc4
 Release:        0
 Summary:        Execute some commands as root
 License:        ISC