sudo (1.8.16-0ubuntu1.2) xenial; urgency=medium * debian/sudoers: - include /snap/bin in the secure_path (LP: #1595558) -- Michael Vogt Mon, 15 Aug 2016 18:10:18 +0200 sudo (1.8.16-0ubuntu1.1) xenial; urgency=medium * debian/patches/lp1565567.patch: fix crash when looking up a negative cached entry which is stored as a NULL passwd or group struct pointer in plugins/sudoers/pwutil.c. (LP: #1565567) -- Marc Deslauriers Wed, 04 May 2016 11:36:54 -0400 sudo (1.8.16-0ubuntu1) xenial; urgency=medium * Update to new upstream version 1.8.16. (LP: #1563825) - Dropped patches no longer needed: + CVE-2015-5602-6.patch + CVE-2015-5602-7.patch * Merge from Debian unstable. Remaining changes: - Use tmpfs location to store timestamp files + debian/rules: change --with-rundir to /var/run/sudo + debian/rules, debian/sudo.service, debian/sudo.sudo.init: stop shipping init script and service file, as they are no longer necessary. + debian/*.preinst, debian/*.postinst, debian/*.postrm: remove old init script with dpkg-maintscript-helper. + debian/*.postinst: remove old /var/run/sudo to /var/lib/sudo transition code, remove old /var/lib/sudo/ts timestamp directory. - debian/rules: + compile with --without-lecture --with-tty-tickets --enable-admin-flag + install man/man8/sudo_root.8 in both flavours + install apport hooks - debian/sudoers: + also grant admin group sudo access - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks - debian/sudo.pam: + Use pam_env to read /etc/environment and /etc/default/locale environment files. Reading ~/.pam_environment is not permitted due to security reasons. - debian/control: + dh-autoreconf dependency fixes missing-build-dependency-for-dh_-command - Remaining patches: + keep_home_by_default.patch: Keep HOME in the default environment + debian/patches/also_check_sudo_group.diff: also check the sudo group in plugins/sudoers/sudoers.c to create the admin flag file. Leave the admin group check for backwards compatibility. - Dropped patches no longer needed: + debian/patches/pam_check_untranslated_prompt.patch: upstream. -- Marc Deslauriers Wed, 30 Mar 2016 08:03:52 -0400 sudo (1.8.15-1.1) unstable; urgency=medium * Non-maintainer upload * Disable editing of files via user-controllable symlinks (Closes: #804149) (CVE-2015-5602) - Fix directory writability checks for sudoedit - Enable sudoedit directory writability checks by default -- Ben Hutchings Mon, 04 Jan 2016 23:36:50 +0000 sudo (1.8.15-1) unstable; urgency=low * new upstream version, closes: #804149 * use --with-exampledir to deliver example files more cleanly -- Bdale Garbee Wed, 23 Dec 2015 11:15:22 -0700 sudo (1.8.12-1ubuntu3) wily; urgency=medium * debian/patches/pam_check_untranslated_prompt.patch: also check the un- translated version of the prompt when checking if the PAM prompt matches "Password:". Patch from Joel Pelaez Jorge. (LP: #1414303) -- Mathieu Trudel-Lapierre Tue, 22 Sep 2015 11:57:43 -0400 sudo (1.8.12-1ubuntu2) wily; urgency=medium * Use tmpfs location to store timestamp files (LP: #1458031) - debian/rules: change --with-rundir to /var/run/sudo - debian/rules, debian/sudo.service, debian/sudo.sudo.init: stop shipping init script and service file, as they are no longer necessary. - debian/*.preinst, debian/*.postinst, debian/*.postrm: remove old init script with dpkg-maintscript-helper. - debian/*.postinst: remove old /var/run/sudo to /var/lib/sudo transition code, remove old /var/lib/sudo/ts timestamp directory. -- Marc Deslauriers Fri, 05 Jun 2015 09:31:38 -0400 sudo (1.8.12-1ubuntu1) wily; urgency=medium * Merge from Debian unstable. (LP: #1451274, LP: #1219337) Remaining changes: - debian/rules: + compile with --without-lecture --with-tty-tickets --enable-admin-flag + install man/man8/sudo_root.8 in both flavours + install apport hooks - debian/sudoers: + also grant admin group sudo access - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks - debian/sudo.pam: + Use pam_env to read /etc/environment and /etc/default/locale environment files. Reading ~/.pam_environment is not permitted due to security reasons. - debian/control: + dh-autoreconf dependency fixes missing-build-dependency-for-dh_-command - Remaining patches: + keep_home_by_default.patch: Keep HOME in the default environment + debian/patches/also_check_sudo_group.diff: also check the sudo group in plugins/sudoers/sudoers.c to create the admin flag file. Leave the admin group check for backwards compatibility. * Dropped patches no longer needed: + add_probe_interfaces_setting.diff + actually-use-buildflags.diff + CVE-2014-9680.patch -- Marc Deslauriers Wed, 13 May 2015 15:43:49 -0400 sudo (1.8.12-1) unstable; urgency=low * new upstream version, closes: #772707, #773383 * patch from Christian Kastner to fix sudoers handling error when moving between sudo and sudo-ldap packages, closes: #776137 -- Bdale Garbee Mon, 23 Feb 2015 08:56:06 -0700 sudo (1.8.11p2-1) unstable; urgency=low * new upstream version -- Bdale Garbee Thu, 30 Oct 2014 11:14:06 -0700 # For older changelog entries, run 'apt-get changelog sudo'