From 234260b2dddb1da0204c8f60978f63cfef969b2fd305917165f94da8b0e639d5 Mon Sep 17 00:00:00 2001 From: Marcus Meissner Date: Sun, 22 Feb 2015 19:18:26 +0000 Subject: [PATCH] Accepting request 287223 from home:vitezslav_cizek:branches:Base:System - update to 1.8.12 (fixes bnc#918953) - changelog: * The embedded copy of zlib has been upgraded to version 1.2.8 and is now installed as a shared library where supported. * Debug settings for the sudo front end and sudoers plugin are now configured separately. * Multiple sudo.conf Debug entries may now be specified per program (or plugin). * The plugin API has been extended such that the path to the plugin that was loaded is now included in the settings array. This path can be used to register with the debugging subsystem. The debug_flags setting is now prefixed with a file name and may be specified multiple times if there is more than one matching Debug setting in sudo.conf. * The sudoers regression tests now run with the locale set to C since some of the tests compare output that includes locale-specific messages. Bug #672. * Fixed a bug where sudo would not run commands on Linux when compiled with audit support if audit is disabled. Bug #671. * The default password prompt now includes a trailing space after "Password:" for consistency with su(1) on most systems. Bug #663. * Visudo will now use the optional sudoers_file, sudoers_mode, sudoers_uid and sudoers_gid arguments if specified on the sudoers.so Plugin line in the sudo.conf file. * Fixed a problem introduced in sudo 1.8.8 that prevented the full host name from being used when the fqdn sudoers option is used. Bug #678. * Sudo now installs a handler for SIGCHLD signal handler immediately before stating the process that will execute the command (or start the monitor). * Removed a limit on the length of command line arguments expanded by a wild card using sudo's version of the fnmatch() function. This limit was introduced when sudo's version of fnmatch() was replaced in sudo 1.8.4. * LDAP-based sudoers can now query an LDAP server for a user's netgroups directly. This is often much faster than fetching every sudoRole object containing a sudoUser that begins with a `+' prefix and checking whether the user is a member of any of the returned netgroups. OBS-URL: https://build.opensuse.org/request/show/287223 OBS-URL: https://build.opensuse.org/package/show/Base:System/sudo?expand=0&rev=81 --- sudo-1.8.11p2.tar.gz | 3 --- sudo-1.8.12.tar.gz | 3 +++ sudo.changes | 40 ++++++++++++++++++++++++++++++++++++++++ sudo.spec | 6 ++++-- 4 files changed, 47 insertions(+), 5 deletions(-) delete mode 100644 sudo-1.8.11p2.tar.gz create mode 100644 sudo-1.8.12.tar.gz diff --git a/sudo-1.8.11p2.tar.gz b/sudo-1.8.11p2.tar.gz deleted file mode 100644 index 7b08a66..0000000 --- a/sudo-1.8.11p2.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:8133849418fa18cf6b6bb6893d1855ff7afe21db8923234a00bf045c90fba1ad -size 2402235 diff --git a/sudo-1.8.12.tar.gz b/sudo-1.8.12.tar.gz new file mode 100644 index 0000000..97d4dba --- /dev/null +++ b/sudo-1.8.12.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:163b51841de8ad19276581a6782d61f5948f1f72a0a843371a1c167d3dc4f3b0 +size 2493373 diff --git a/sudo.changes b/sudo.changes index 19e9b01..d1b80d9 100644 --- a/sudo.changes +++ b/sudo.changes @@ -1,3 +1,43 @@ +------------------------------------------------------------------- +Sun Feb 22 15:29:28 UTC 2015 - vcizek@suse.com + +- update to 1.8.12 (fixes bnc#918953) +- changelog: + * The embedded copy of zlib has been upgraded to version 1.2.8 and + is now installed as a shared library where supported. + * Debug settings for the sudo front end and sudoers plugin are now configured separately. + * Multiple sudo.conf Debug entries may now be specified per program (or plugin). + * The plugin API has been extended such that the path to the plugin + that was loaded is now included in the settings array. This path + can be used to register with the debugging subsystem. The debug_flags + setting is now prefixed with a file name and may be specified multiple + times if there is more than one matching Debug setting in sudo.conf. + * The sudoers regression tests now run with the locale set to C since + some of the tests compare output that includes locale-specific messages. Bug #672. + * Fixed a bug where sudo would not run commands on Linux when compiled + with audit support if audit is disabled. Bug #671. + * The default password prompt now includes a trailing space after + "Password:" for consistency with su(1) on most systems. Bug #663. + * Visudo will now use the optional sudoers_file, sudoers_mode, + sudoers_uid and sudoers_gid arguments if specified on the sudoers.so Plugin line in the sudo.conf file. + * Fixed a problem introduced in sudo 1.8.8 that prevented the full + host name from being used when the fqdn sudoers option is used. Bug #678. + * Sudo now installs a handler for SIGCHLD signal handler immediately + before stating the process that will execute the command (or start the monitor). + * Removed a limit on the length of command line arguments expanded by + a wild card using sudo's version of the fnmatch() function. + This limit was introduced when sudo's version of fnmatch() was replaced in sudo 1.8.4. + * LDAP-based sudoers can now query an LDAP server for a user's netgroups + directly. This is often much faster than fetching every sudoRole object + containing a sudoUser that begins with a `+' prefix and checking + whether the user is a member of any of the returned netgroups. + * The mail_always sudoers option no longer sends mail for + sudo -l or sudo -v unless the user is unable to authenticate themselves. + * Fixed a crash when sudo is run with an empty argument vector. + * Fixed two potential crashes when sudo is run with very low resource limits. + * The TZ environment variable is now checked for safety instead of simply + being copied to the environment of the command. This fixes a potential security issue. + ------------------------------------------------------------------- Wed Dec 17 09:52:47 UTC 2014 - vcizek@suse.com diff --git a/sudo.spec b/sudo.spec index 25f1c3e..c57dc50 100644 --- a/sudo.spec +++ b/sudo.spec @@ -1,7 +1,7 @@ # # spec file for package sudo # -# Copyright (c) 2014 SUSE LINUX Products GmbH, Nuernberg, Germany. +# Copyright (c) 2015 SUSE LINUX GmbH, Nuernberg, Germany. # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -17,7 +17,7 @@ Name: sudo -Version: 1.8.11p2 +Version: 1.8.12 Release: 0 Summary: Execute some commands as root License: ISC @@ -128,6 +128,8 @@ install -m 755 %{SOURCE3} %{buildroot}/var/lib/tests/sudo install -m 755 %{SOURCE4} %{buildroot}/var/lib/tests/sudo install -d %{buildroot}%{_docdir}/%{name}-test install -m 644 %{buildroot}%{_docdir}/%{name}/LICENSE %{buildroot}%{_docdir}/%{name}-test/LICENSE +mkdir -p %{buildroot}/%{_docdir}/sudo/examples/ +mv %{buildroot}/usr/share/examples/sudo/* %{buildroot}/%{_docdir}/sudo/examples/ %post chmod 0440 %{_sysconfdir}/sudoers