From 282f49c3fcbd9a51c67d04236b8dea87fc68bc896727a6f534a643b0dc607eb8 Mon Sep 17 00:00:00 2001 From: Kristyna Streitova Date: Thu, 7 May 2020 13:00:36 +0000 Subject: [PATCH] Accepting request 801195 from home:kstreitova:branches:Base:System - Update to 1.9.0rc4 * Various spelling fixes. Bug #925. * The struct passwd passed to PAM session modules is now looked up by user name, not user-ID, when possible. Fixes a problem with the pam_limits module and configurations where multiple user names share the same ID. Debian bug #734752. * Sudo command line options that take a value may only be specified once. This is to help guard against problems caused by poorly written scripts that invoke sudo with user-controlled input. Bug #924. - Update to 1.9.0rc3 * The sudo-logsrvd package now installs a systemd service on Linux distros that use systemd. * The I/O plugin is now closed before the policy plugin on command exit. * When copying the edited files to the original path, sudoedit now allocates any additional space needed before writing. Previously, it could truncate the destination file if the file system was full. Bug #922. * Fixed a compilation issue with Python 3.8. * Changed how TLS connections are made to the log server. Instead of using a starttls type approach where TLS and plaintext connections share the same point we now use separate ports for plaintext and TLS connections. A (tls) flag can be specified after the host:port to indicate that the connection should be secured with TLS. This avoids a potention man-in-the-middle attack that could cause the connection to be forced into plaintext mode. Unfortunately, this change breaks compatibility with the previous release candidates. OBS-URL: https://build.opensuse.org/request/show/801195 OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=168 --- sudo-1.9.0rc2.tar.gz | 3 --- sudo-1.9.0rc2.tar.gz.sig | Bin 566 -> 0 bytes sudo-1.9.0rc4.tar.gz | 3 +++ sudo-1.9.0rc4.tar.gz.sig | Bin 0 -> 543 bytes sudo.changes | 36 ++++++++++++++++++++++++++++++++++++ sudo.spec | 2 +- 6 files changed, 40 insertions(+), 4 deletions(-) delete mode 100644 sudo-1.9.0rc2.tar.gz delete mode 100644 sudo-1.9.0rc2.tar.gz.sig create mode 100644 sudo-1.9.0rc4.tar.gz create mode 100644 sudo-1.9.0rc4.tar.gz.sig diff --git a/sudo-1.9.0rc2.tar.gz b/sudo-1.9.0rc2.tar.gz deleted file mode 100644 index ce3c889..0000000 --- a/sudo-1.9.0rc2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:9b21df2def88776be80d4815b231b9b208930f6b5b25e2e7ac9d0ff2d1c5158d -size 3722476 diff --git a/sudo-1.9.0rc2.tar.gz.sig b/sudo-1.9.0rc2.tar.gz.sig deleted file mode 100644 index 3dcd225d86daa138fe845391968140158a47eebf3b613ea6676a19b1a22fcd15..0000000000000000000000000000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 566 zcmV-60?GY}0y6{v0SEvc79j*#(do>(D>r8Z{nJ~i^uQs`q;UHM0$z`ZPXG!D5UKRQ zAU-F`U1kGB*mgtv6jH>bM{~KUlty+!b;E-jk-lO1l`hm6qnVRZ@O&#uljT& zwl?;bH!k335X7?TXk6kxPGEshA0vAl*#&uw)rX75VEh$FS5crNVERO7B2$`pn#b#r zX`)<gu&8&uTqT9bg+0g4dr<62)WV1YWD~@&iN#qRuAJc(&P&F~JovsRKIML^b*|s{@$}j`7mGde1AD!Qq=n=~OWMzE$C7TeO~Q!X>&hrv)LJc{&YrZN-dpm@F82hGAeGJ{D7 z$OF7LIshCIsl>$o6M(a9%Zfwui!glIwwGj-`ftP7?M?2;4m%bb?l$SY-d9x|0R(+EUUf}$<|_%;mCY>&sh}Y_Cm>IC13O-&kweM z0qbye&u$|w#x5~))ab9g()@yfqz^V;u%e-D2kVf`j)vyz(YC<$x`F1bfgE&vkeoVb zNv!=EIF!V)IOBh2D%F%)X*gKrl&X!+Q(QBd8w)2Y z{mW+C{!;RGH$)E|K||bm;$$lN|7r{Cia<*haT(=(?t`p6%}-dQLmqsxNvZ$Ke*h)` z8X7olC;4LyFL6Jf5gw?lL-HZnLjjo=keOKj;X9ch2w&g&`;W0@oEtnq@)GXw?&d9b zScHR(6d5$I6(+6i5rE*caL86v_Z8czTok4lSdC>|=MQ?(i;|_Pz`+squ8@LVs%l|I zHOet%T}y5%u0ma4u_9eH#!e8wbXJ8!!drsLIDO}t3vm4B4RcTIF;lyOozlyqyW%ar hr}m0)Q>w?0Mi%l63M7a5+n;L3SnI8LaC0- literal 0 HcmV?d00001 diff --git a/sudo.changes b/sudo.changes index efd014d..e7da9af 100644 --- a/sudo.changes +++ b/sudo.changes @@ -1,3 +1,39 @@ +------------------------------------------------------------------- +Thu May 7 12:14:26 UTC 2020 - Kristyna Streitova + +- Update to 1.9.0rc4 + * Various spelling fixes. Bug #925. + * The struct passwd passed to PAM session modules is now looked up + by user name, not user-ID, when possible. Fixes a problem with + the pam_limits module and configurations where multiple user names + share the same ID. Debian bug #734752. + * Sudo command line options that take a value may only be specified + once. This is to help guard against problems caused by poorly + written scripts that invoke sudo with user-controlled input. Bug #924. + +------------------------------------------------------------------- +Wed May 6 07:37:58 UTC 2020 - Kristyna Streitova + +- Update to 1.9.0rc3 + * The sudo-logsrvd package now installs a systemd service on Linux + distros that use systemd. + * The I/O plugin is now closed before the policy plugin on command + exit. + * When copying the edited files to the original path, sudoedit now + allocates any additional space needed before writing. Previously, + it could truncate the destination file if the file system was + full. Bug #922. + * Fixed a compilation issue with Python 3.8. + * Changed how TLS connections are made to the log server. Instead + of using a starttls type approach where TLS and plaintext + connections share the same point we now use separate ports for + plaintext and TLS connections. A (tls) flag can be specified after + the host:port to indicate that the connection should be secured + with TLS. This avoids a potention man-in-the-middle attack that + could cause the connection to be forced into plaintext mode. + Unfortunately, this change breaks compatibility with the + previous release candidates. + ------------------------------------------------------------------- Fri Apr 17 17:07:06 UTC 2020 - Kristyna Streitova diff --git a/sudo.spec b/sudo.spec index e1b66a1..56958ca 100644 --- a/sudo.spec +++ b/sudo.spec @@ -22,7 +22,7 @@ %define use_usretc 1 %endif Name: sudo -Version: 1.9.0rc2 +Version: 1.9.0rc4 Release: 0 Summary: Execute some commands as root License: ISC