1 sudo (1.8.3p1-2) unstable; urgency=low
3 * if upgrading from squeeze, and the sudoers file is unmodified, avoid
4 the packaging system prompting the user about a change they didn't make
5 now that sudoers is a conffile, closes: #612532, #636049
6 * add a recommendation for the use of visudo to the sudoers.d/README file,
9 -- Bdale Garbee <bdale@gag.com> Sat, 12 Nov 2011 16:27:13 -0700
11 sudo (1.8.3p1-1) unstable; urgency=low
13 * new upstream version, closes: #646478
15 -- Bdale Garbee <bdale@gag.com> Thu, 27 Oct 2011 01:03:44 +0200
17 sudo (1.8.3-1) unstable; urgency=low
19 * new upstream version, closes: #639391, #639568
21 -- Bdale Garbee <bdale@gag.com> Sat, 22 Oct 2011 23:49:16 -0600
23 sudo (1.8.2-2) unstable; urgency=low
26 * debian/rules improvements, closes: #642535
27 + mv upstream sample.* files to the examples folder.
28 - do not call dh_installexamples.
31 * patch from upstream for SIGBUS on sparc64, closes: #640304
32 * use common-session-noninteractive in the pam config to reduce log noise
33 when sudo is used in cron, etc, closes: #519700
34 * patch from Steven McDonald to fix segfault on startup under certain
35 conditions, closes: #639568
36 * add a NEWS entry regarding the secure_path change made in 1.8.2-1,
39 -- Bdale Garbee <bdale@gag.com> Mon, 26 Sep 2011 21:55:56 -0600
41 sudo (1.8.2-1) unstable; urgency=low
43 * new upstream version, closes: #637449, #621830
44 * include common-session in pam config, closes: #519700, #607199
45 * move secure_path from configure to default sudoers, closes: #85123, 85917
46 * improve sudoers self-documentation, closes: #613639
47 * drop --disable-setresuid since modern systems should not run 2.2 kernels
48 * lose the --with-devel configure option since it's breaking builds in
49 subdirectories for some reason
51 -- Bdale Garbee <bdale@gag.com> Wed, 24 Aug 2011 13:33:11 -0600
53 sudo (1.7.4p6-1) unstable; urgency=low
55 * new upstream version
56 * touch the right stamp name after configuring, closes: #611287
57 * patch from Svante Signell to fix build problem on Hurd, closes: #611290
59 -- Bdale Garbee <bdale@gag.com> Wed, 09 Feb 2011 11:32:58 -0700
61 sudo (1.7.4p4-6) unstable; urgency=low
63 * update /etc/sudoers.d/README now that sudoers is a conffile
64 * patch from upstream to fix special case in password checking code
65 when only the gid is changing, closes: #609641
67 -- Bdale Garbee <bdale@gag.com> Tue, 11 Jan 2011 10:22:39 -0700
69 sudo (1.7.4p4-5) unstable; urgency=low
71 * patch from Jakub Wilk to add noopt and nostrip build option support,
73 * make sudoers a conffile, closes: #605130
74 * add descriptions to LSB init headers, closes: #604619
75 * change default sudoers %sudo entry to allow gid changes, closes: #602699
76 * add Vcs entries to the control file
77 * use debhelper install files instead of explicit installs in rules
79 -- Bdale Garbee <bdale@gag.com> Wed, 01 Dec 2010 20:32:31 -0700
81 sudo (1.7.4p4-4) unstable; urgency=low
83 * patch from upstream to resolve problem always prompting for a password
84 when run without a tty, closes: #599376
85 * patch from upstream to resolve interoperability problem between HOME in
86 env_keep and the -H flag, closes: #596493
87 * change path syntax to avoid tar error when /var/run/sudo exists but is
88 empty, closes: #598877
90 -- Bdale Garbee <bdale@gag.com> Thu, 07 Oct 2010 15:59:06 -0600
92 sudo (1.7.4p4-3) unstable; urgency=low
94 * make postinst clause for handling /var/run -> /var/lib transition less
95 fragile, closes: #585514
96 * cope with upstream's Makefile trying to install ChangeLog in our doc
97 directory, closes: #597389
98 * fix README.Debian to reflect that HOME is no longer preserved by default,
101 -- Bdale Garbee <bdale@gag.com> Tue, 21 Sep 2010 23:53:08 -0600
103 sudo (1.7.4p4-2) unstable; urgency=low
105 * add a NEWS item about change in $HOME handling that impacts programs
108 -- Bdale Garbee <bdale@gag.com> Wed, 08 Sep 2010 14:29:16 -0600
110 sudo (1.7.4p4-1) unstable; urgency=high
112 * new upstream version, urgency high due to fix for flaw in Runas group
113 matching (CVE-2010-2956), closes: #595935
114 * handle transition of /var/run/sudo to /var/lib/sudo better, to avoid
115 re-lecturing existing users, and to clean up after ourselves on upgrade,
116 and remove the RAMRUN section from README.Debian since the new state dir
117 should fix the original problem, closes: #585514
118 * deliver README.Debian to both package flavors, closes: #593579
120 -- Bdale Garbee <bdale@gag.com> Tue, 07 Sep 2010 12:22:42 -0600
122 sudo (1.7.2p7-1) unstable; urgency=high
124 * new upstream release with security fix for secure path (CVE-2010-1646),
126 * move timestamps from /var/run/sudo to /var/lib/sudo, so that the state
127 about whether to give the lecture is preserved across reboots even when
128 RAMRUN is set, closes: #581393
129 * add a note to README.Debian about LDAP needing an entry in
130 /etc/nsswitch.conf, closes: #522065
131 * add a note to README.Debian about how to turn off lectures if using
132 RAMRUN in /etc/default/rcS, closes: #581393
134 -- Bdale Garbee <bdale@gag.com> Thu, 10 Jun 2010 15:42:14 -0600
136 sudo (1.7.2p6-1) unstable; urgency=low
138 * new upstream version fixing CVE-2010-1163, closes: #578275, #570737
140 -- Bdale Garbee <bdale@gag.com> Mon, 19 Apr 2010 10:45:47 -0600
142 sudo (1.7.2p5-1) unstable; urgency=low
144 * new upstream release, closes a bug filed upstream regarding missing man
145 page processing scripts in the 1.7.2p1 tarball, also includes the fix
146 for CVE-2010-0426 previously the subject of a security team nmu
147 * move to source format 3.0 (quilt) and restructure changes as patches
148 * fix unprocessed substitution variables in man pages, closes: #557204
149 * apply patch from Neil Moore to fix Debian-specific content in the
150 visudo man page, closes: #555013
151 * update descriptions to better explain sudo-ldap, closes: #573108
152 * eliminate spurious 'and' in man page, closes: #571620
153 * fix confusing text in default sudoers, closes: #566607
155 -- Bdale Garbee <bdale@gag.com> Thu, 11 Mar 2010 15:44:53 -0700
157 sudo (1.7.2p1-1) unstable; urgency=low
159 * new upstream version
160 * add support for /etc/sudoers.d using #includedir in default sudoers,
161 which I think is also a good solution to the request for a crontab-like
162 API requested in March of 2001, closes: #539994, #271813, #89743
163 * move init.d script from using rcS.d to rc[0-6].d, closes: #542924
165 -- Bdale Garbee <bdale@gag.com> Mon, 31 Aug 2009 14:09:32 -0600
167 sudo (1.7.2-2) unstable; urgency=low
169 * further improve initial sudoers to not include the NOPASSWD option on
170 the group sudo exception, closes: #539136, #198991
172 -- Bdale Garbee <bdale@gag.com> Wed, 29 Jul 2009 16:21:04 +0200
174 sudo (1.7.2-1) unstable; urgency=low
176 * new upstream version, closes: #537103
177 * improve initial sudoers by having the exemption for users in group
178 sudo on by default, and including the ability to run any command as
179 any user. This makes the default install roughly equivalent to our
180 old use of the --with-exempt=sudo build option, closes: #536220, #536222
182 -- Bdale Garbee <bdale@gag.com> Wed, 15 Jul 2009 01:29:46 -0600
184 sudo (1.7.0-1) unstable; urgency=low
186 * new upstream version, closes: #510179, #128268, #520274, #508514
187 * fix ldap config file path for sudo-ldap package, including creating
188 a symlink in postinst and cleaning it up in postrm for the sudo-ldap
189 package, closes: #430826
190 * fix NOPASSWD entry location in default config file for the sudo-ldap
191 instance too, closes: #479616
193 -- Bdale Garbee <bdale@gag.com> Sat, 28 Mar 2009 15:15:01 -0600
195 sudo (1.6.9p17-2) unstable; urgency=high
197 * patch from upstream to fix privilege escalation with certain
198 configurations, CVE-2009-0034
199 * typo in sudoers man page, closes: #507163
201 -- Bdale Garbee <bdale@gag.com> Tue, 27 Jan 2009 11:49:02 -0700
203 sudo (1.6.9p17-1) unstable; urgency=low
205 * new upstream version, closes: #481008
206 * deliver schemas to doc directory in sudo-ldap package, closes: #474331
207 * re-apply patch from Petter Reinholdtsen to improve init.d apparently lost
208 in move from CVS to git for package management, closes: #475821
209 * re-instate the init.d for the sudo-ldap package too... /o\
211 -- Bdale Garbee <bdale@gag.com> Sun, 06 Jul 2008 01:16:31 -0600
213 sudo (1.6.9p15-2) unstable; urgency=low
215 * revert the fix for 388659 such that visudo once again defaults to using
216 /usr/bin/editor. I was always ambivalent about this change, it has caused
217 more confusion and frustration than it cured, and I find Justin's line of
218 reasoning persuasive. Update the man page source to reflect this choice
219 and the related use of --with-env-editor. Closes: #474197.
220 * patch from Petter Reinholdtsen to improve init.d, closes: #475821
222 -- Bdale Garbee <bdale@gag.com> Wed, 16 Apr 2008 00:38:56 -0600
224 sudo (1.6.9p15-1) unstable; urgency=low
226 * new upstream version, closes: #467126, #473337
227 * remove pointless postrm scripts, leaving debhelper do its thing if needed,
228 thanks to Justin Pryzby for pointing this out
229 * reinstate the init.d, since bootclean doesn't quite do what we want. This
230 also means we don't need the preinst scripts any more. Update the lintian
231 overrides since postinst is a Perl script lintian apparently isn't parsing
232 well. closes: #330868
234 -- Bdale Garbee <bdale@gag.com> Thu, 03 Apr 2008 14:25:56 -0600
236 sudo (1.6.9p12-1) unstable; urgency=low
238 * new upstream version, closes: #464890
240 -- Bdale Garbee <bdale@gag.com> Tue, 19 Feb 2008 11:19:54 +0900
242 sudo (1.6.9p11-3) unstable; urgency=low
244 * patch for configure to fix FTBFS on GNU/kFreeBSD, closes: #465956
246 -- Bdale Garbee <bdale@gag.com> Fri, 15 Feb 2008 10:54:21 -0700
248 sudo (1.6.9p11-2) unstable; urgency=low
250 * update version compared in preinst when removing obsolete init.d,
252 * implement pam session config suggestions from Elizabeth Fong,
253 closes: #452457, #402329
255 -- Bdale Garbee <bdale@gag.com> Mon, 04 Feb 2008 21:26:23 -0700
257 sudo (1.6.9p11-1) unstable; urgency=low
259 * new upstream version
261 -- Bdale Garbee <bdale@gag.com> Fri, 11 Jan 2008 01:54:35 -0700
263 sudo (1.6.9p10-1) unstable; urgency=low
265 * new upstream version
266 * tweak default password prompt as %u doesn't make sense. Accept patch from
267 Patrick Schoenfeld (recommend upstream accept it too) that adds a %p and
268 uses it by default, closes: #454409
269 * accept patch from Martin Pitt that adds a prerm making it difficult to
270 "accidentally" remove sudo when there is no root password set on the
271 system, closes: #451241
273 -- Bdale Garbee <bdale@gag.com> Fri, 28 Dec 2007 11:44:30 -0700
275 sudo (1.6.9p9-1) unstable; urgency=low
277 * new upstream version
278 * debian/rules: configure a more informative default password prompt to
279 reduce confusion when using sudo to invoke commands which also ask for
280 passwords, closes: #343268
281 * auth/pam.c: don't use the PAM prompt if the user explicitly requested
282 a custom prompt, closes: #448628.
283 * fix configure's ability to discover that libc has dirfd, closes: #451324
284 * make default editor be /usr/bin/vi instead of /usr/bin/editor, so that
285 the command 'visudo' invokes a vi variant by default as documented,
288 -- Bdale Garbee <bdale@gag.com> Mon, 03 Dec 2007 10:26:51 -0700
290 sudo (1.6.9p6-1) unstable; urgency=low
292 * new upstream version, closes: #442815, #446146, #438699, #435768, #435314
293 closes: #434832, #434608, #430382
294 * eliminate the now-redundant init.d scripts, closes: #397090
295 * fix typo in TROUBLESHOOTING file, closes: #439624
297 -- Bdale Garbee <bdale@gag.com> Wed, 24 Oct 2007 21:13:41 -0600
299 sudo (1.6.8p12-6) unstable; urgency=low
301 * fix typos in visudo.pod relating to env_editor variable, closes: #418886
302 * have init.d touch directories in /var/run/sudo, not just files, as a
304 * fix various typos in sudoers.pod, closes: #419749
305 * don't let Makefile strip binaries, closes: #438073
307 -- Bdale Garbee <bdale@gag.com> Wed, 05 Sep 2007 11:26:58 +0100
309 sudo (1.6.8p12-5) unstable; urgency=low
311 * update debian/copyright to reflect new upstream URL, closes: #368746
312 * add sandwich cartoon URL to the README.Debian
313 * don't remove sudoers on purge. can cause problems when moving between
314 sudo and sudo-ldap. leaving sudoers around on purge seems like the least
315 evil choice for now, closes: #401366
316 * also preserve XAPPLRESDIR, XFILESEARCHPATH, and XUSERFILESEARCHPATH,
318 * accept patch that improves debian/rules from Ted Percival, closes: #382122
319 * no longer build with --with-exempt=sudo, provide an example entry in the
320 default sudoers file instead, closes: #296605
321 * add --with-devel to configure and augment build dependencies so that flex
322 and yacc files get re-generated on every build, closes: #316249
324 -- Bdale Garbee <bdale@gag.com> Tue, 3 Apr 2007 21:48:45 -0600
326 sudo (1.6.8p12-4) unstable; urgency=low
328 * patch from Petter Reinholdtsen for the LSB info block in the init.d
329 script, closes: #361055
330 * deliver sudoers sample again, closes: #361593
332 -- Bdale Garbee <bdale@gag.com> Sat, 15 Apr 2006 01:38:04 -0600
334 sudo (1.6.8p12-3) unstable; urgency=low
336 * force-feed configure knowledge of nroff's path so we get unformatted man
337 pages installed without build-depending on groff-base, closes: #360894
338 * add a reference to OPTIONS in the man page, closes: #186226
340 -- Bdale Garbee <bdale@gag.com> Wed, 5 Apr 2006 17:53:13 -0700
342 sudo (1.6.8p12-2) unstable; urgency=low
344 * fix typos in init scripts, closes: #346325
345 * update to debhelper compat level 5
346 * build depend on autotools-dev to ensure config.sub/guess are fresh
347 * accept patch from Martin Schulze developed for 1.6.8p7-1.4 in stable, and
348 use it here as well. Thanks to Martin and the debian-security team.
349 closes: #349196, #349549, #349587, #349729, #349129, #350776, #349085
350 closes: #315115, #315718, #203874
351 * Non-maintainer upload by the Security Team
352 * Reworked the former patch to limit environment variables from being
353 passed through, set env_reset as default instead [sudo.c, env.c,
354 sudoers.pod, Bug#342948, CVE-2005-4158]
355 * env_reset is now set by default
356 * env_reset will preserve only HOME, LOGNAME, PATH, SHELL, TERM,
357 DISPLAY, XAUTHORITY, XAUTHORIZATION, LANG, LANGUAGE, LC_*, and USER
358 (in addition to the SUDO_* variables)
359 * Rebuild sudoers.man.in from the POD file
360 * Added README.Debian
361 * patch from Alexander Zangerl to fix duplicated PATH issue, closes: #354431
362 * simplify rules file by using more of Makefile, despite having to override
363 default directories with more arguments to configure, closes: #292833
364 * update sudo man page to reflect use of SECURE_PATH, closes: #228551
365 * inconsistencies in sudoers man page resolved, closes: #220808, #161012
366 * patch from Jeroen van Wolffelaar to improve behavior when FQDNs are
367 unresolveable (requires adding bison as build dep), closes: #314949
369 -- Bdale Garbee <bdale@gag.com> Sun, 2 Apr 2006 14:26:20 -0700
371 sudo (1.6.8p12-1) unstable; urgency=low
373 * new upstream version, closes: #342948 (CVE-2005-4158)
374 * add env_reset to the sudoers file we create if none already exists,
375 as a further precaution in response to discussion about CVS-2005-4158
376 * split ldap support into a new sudo-ldap package. I was trying to avoid
377 doing this, but the impact of going from 4 to 17 linked shlibs on the
378 autobuilder chroots is sufficient motivation for me.
381 -- Bdale Garbee <bdale@gag.com> Wed, 28 Dec 2005 13:49:10 -0700
383 sudo (1.6.8p9-4) unstable; urgency=low
385 * enable ldap support, deliver README.LDAP and sudoers2ldif, closes: #283231
386 * merge patch from Martin Pitt / Ubuntu to be more robust about resetting
387 timestamps in the init.d script, closes: #330868
388 * add dependency header to init.d script, closes: #332849
390 -- Bdale Garbee <bdale@gag.com> Sat, 10 Dec 2005 07:47:07 -0800
392 sudo (1.6.8p9-3) unstable; urgency=high
394 * update debhelper compatibility level from 2 to 4
395 * add man page symlink for sudoedit
396 * Clean SHELLOPTS and PS4 from the environment before executing programs
397 with sudo permissions [env.c, CAN-2005-2959]
398 * fix typo in manpage pointed out by Moray Allen, closes: #285995
399 * fix paths in sample complex sudoers file, closes: #303542
400 * fix type in sudoers man page, closes: #311244
402 -- Bdale Garbee <bdale@gag.com> Wed, 28 Sep 2005 01:18:04 -0600
404 sudo (1.6.8p9-2) unstable; urgency=high
406 * merge the NMU fix for sudoedit symlink problem that was in 1.6.8p7-1.1,
409 -- Bdale Garbee <bdale@gag.com> Tue, 28 Jun 2005 16:18:47 -0400
411 sudo (1.6.8p9-1) unstable; urgency=high
413 * new upstream version, fixes a race condition in sudo's pathname
414 validation, which is a security issue (CAN-2005-1993),
415 closes: #315115, #315718
417 -- Bdale Garbee <bdale@gag.com> Tue, 28 Jun 2005 15:33:11 -0400
419 sudo (1.6.8p7-1) unstable; urgency=low
421 * new upstream version, closes: #299585
422 * update lintian overrides to squelch the postinst warning
423 * change sudoedit from a hard to a soft link, closes: #296896
424 * fix regex doc in sudoers man page, closes: #300361
426 -- Bdale Garbee <bdale@gag.com> Sat, 26 Mar 2005 22:18:34 -0700
428 sudo (1.6.8p5-1) unstable; urgency=high
430 * new upstream version
431 * restores ability to use config tuples without a value, which was causing
432 problems on upgrade closes: #283306
433 * deliver sudoedit, closes: #283078
434 * marking urgency high since 283306 is a serious upgrade incompatibility
436 -- Bdale Garbee <bdale@gag.com> Fri, 3 Dec 2004 10:11:16 -0700
438 sudo (1.6.8p3-2) unstable; urgency=high
440 * update pam.d deliverable so ldap works again, closes: #282191
442 -- Bdale Garbee <bdale@gag.com> Mon, 22 Nov 2004 11:44:46 -0700
444 sudo (1.6.8p3-1) unstable; urgency=high
446 * new upstream version, fixes a flaw in sudo's environment sanitizing that
447 could allow a malicious user with permission to run a shell script that
448 utilized the bash shell to run arbitrary commands, closes: #281665
449 * patch the sample sudoers to have the proper path for kill on Debian
450 systems, closes: #263486
451 * patch the sudo manpage to reflect Debian's choice of exempt_group
452 default setting, closes: #236465
453 * patch the sudo manpage to reflect Debian's choice of no timeout on the
454 password prompt, closes: #271194
456 -- Bdale Garbee <bdale@gag.com> Tue, 16 Nov 2004 23:23:41 -0700
458 sudo (1.6.7p5-2) unstable; urgency=low
460 * Jeff Bailey reports that seteuid works on current sparc systems, so we
461 no longer need the "grosshack" stuff in the sudo rules file
462 * add a postrm that removes /etc/sudoers on purge. don't do this with the
463 normal conffile mechanism since it would generate noise on every upgrade,
466 -- Bdale Garbee <bdale@gag.com> Tue, 20 Jul 2004 12:29:48 -0400
468 sudo (1.6.7p5-1) unstable; urgency=low
470 * new upstream version, closes: #190265, #193222, #197244
471 * change from '.' to ':' in postinst chown call, closes: #208369
473 -- Bdale Garbee <bdale@gag.com> Tue, 2 Sep 2003 21:27:06 -0600
475 sudo (1.6.7p3-2) unstable; urgency=low
477 * add --disable-setresuid to configure call since 2.2 kernels don't support
478 setresgid, closes: #189044
479 * cosmetic cleanups to debian/rules as long as I'm there
481 -- Bdale Garbee <bdale@gag.com> Tue, 15 Apr 2003 16:04:48 -0600
483 sudo (1.6.7p3-1) unstable; urgency=low
485 * new upstream version
486 * add overrides to quiet lintian about things it doesn't understand,
487 except the source one that can't be overridden until 129510 is fixed
489 -- Bdale Garbee <bdale@gag.com> Mon, 7 Apr 2003 17:34:05 -0600
491 sudo (1.6.6-3) unstable; urgency=low
493 * add code to rules file to update config.sub/guess, closes: #164501
495 -- Bdale Garbee <bdale@gag.com> Sat, 12 Oct 2002 15:35:22 -0600
497 sudo (1.6.6-2) unstable; urgency=low
499 * adopt suggestion from Marcus Brinkmann to feed --with-sendmail option to
500 configure, and lose the build dependency on mail-transport-agent
501 * incorporate changes from LaMont's NMU, closes: #144665, #144737
502 * update init.d to not try and set time on nonexistent timestamp files,
504 * build with --with-all-insults, admin must edit sudoers to turn insults
505 on at runtime if desired, closes: #135374
506 * stop setting /usr/doc symlink in postinst
508 -- Bdale Garbee <bdale@gag.com> Sat, 12 Oct 2002 01:54:24 -0600
510 sudo (1.6.6-1.1) unstable; urgency=high
512 * NMU - patch from Colin Watson <cjwatson@debian.org>, in bts.
513 * Revert patch to auth/pam.c that left pass uninitialized, causing a
514 segfault (Closes: #144665).
516 -- LaMont Jones <lamont@debian.org> Fri, 26 Apr 2002 22:36:04 -0600
518 sudo (1.6.6-1) unstable; urgency=high
520 * new upstream version, fixes security problem with crafty prompts,
523 -- Bdale Garbee <bdale@gag.com> Thu, 25 Apr 2002 12:45:49 -0600
525 sudo (1.6.5p1-4) unstable; urgency=high
527 * apply patch for auth/pam.c to fix yet another way to make sudo segfault
528 if ctrl/C'ed at password prompt, closes: #131235
530 -- Bdale Garbee <bdale@gag.com> Sun, 3 Mar 2002 23:18:56 -0700
532 sudo (1.6.5p1-3) unstable; urgency=high
534 * ugly hack to add --disable-saved-ids when building on sparc in response
535 to 131592, which will be reassigned to glibc for a real fix
536 * urgency high since the sudo currently in testing for sparc is worthless
538 -- Bdale Garbee <bdale@gag.com> Sun, 17 Feb 2002 22:42:10 -0700
540 sudo (1.6.5p1-2) unstable; urgency=high
542 * patch from upstream to fix seg faults caused by versions of pam that
543 follow a NULL pointer, closes: #129512
545 -- Bdale Garbee <bdale@gag.com> Tue, 22 Jan 2002 01:50:13 -0700
547 sudo (1.6.5p1-1) unstable; urgency=high
549 * new upstream version
550 * add --disable-root-mailer option supported by new version to configure
551 call in rules file, closes: #129648
553 -- Bdale Garbee <bdale@gag.com> Fri, 18 Jan 2002 11:29:37 -0700
555 sudo (1.6.4p1-1) unstable; urgency=high
557 * new upstream version, with fix for segfaulting problem in 1.6.4
559 -- Bdale Garbee <bdale@gag.com> Mon, 14 Jan 2002 20:09:46 -0700
561 sudo (1.6.4-1) unstable; urgency=high
563 * new upstream version, includes an important security fix, closes: #127576
565 -- Bdale Garbee <bdale@gag.com> Mon, 14 Jan 2002 09:35:48 -0700
567 sudo (1.6.3p7-5) unstable; urgency=low
569 * only touch /var/run/sudo/* if /var/run/sudo is there, closes: #126872
570 * fix spelling error in init.d, closes: #126847
572 -- Bdale Garbee <bdale@gag.com> Sat, 29 Dec 2001 11:21:43 -0700
574 sudo (1.6.3p7-4) unstable; urgency=medium
576 * use touch to set status files to an ancient date instead of removing them
577 outright on reboot. this achieves the desired effect of keeping elevated
578 privs from living across reboots, without forcing everyone to see the
579 new-sudo-user lecture after every reboot. pick a time that's 'old enough'
580 for systems with good clocks, and 'recent enough' that broken PC hardware
581 setting the clock to commonly-seen bogus dates trips over the "don't trust
582 future timestamps" rule. closes: #76529, #123559
583 * apply patch from Steve Langasek to fix seg faults due to interaction with
584 PAM code. upstream confirms the problem, and says they're fixing this
585 differently for their next release... but this should be useful in the
586 meantime, and would be good to get into woody. closes: #119147
587 * only run the init.d at boot, not on each runlevel change... and don't run
588 it during package configure. closes: #125935
589 * add DEB_BUILD_OPTIONS support to rules file, closes: #94952
591 -- Bdale Garbee <bdale@gag.com> Wed, 26 Dec 2001 12:40:44 -0700
593 sudo (1.6.3p7-3) unstable; urgency=low
595 * apply patch from Fumitoshi UKAI that fixes segfaults when hostname not
596 resolvable, closes: #86062, #69430, #77852, #82744, #55716, #56718,
597 * fix a typo in the manpage, closes: #97368
598 * apply patch to configure.in and run autoconf to fix problem building on
599 the hurd, closes: #96325
600 * add an init.d to clean out /var/run/sudo at boot, so privs are guaranteed
601 to not last across reboots, closes: #76529
602 * clean up lintian-noticed cosmetic packaging issues
604 -- Bdale Garbee <bdale@gag.com> Sat, 1 Dec 2001 02:59:52 -0700
606 sudo (1.6.3p7-2) unstable; urgency=low
608 * update config.sub/guess for hppa support
610 -- Bdale Garbee <bdale@gag.com> Sun, 22 Apr 2001 23:23:42 -0600
612 sudo (1.6.3p7-1) unstable; urgency=low
614 * new upstream version
615 * add build dependency on mail-transport-agent, closes: #90685
617 -- Bdale Garbee <bdale@gag.com> Thu, 12 Apr 2001 17:02:42 -0600
619 sudo (1.6.3p6-1) unstable; urgency=high
621 * new upstream version, fixes buffer overflow problem,
622 closes: #87259, #87278, #87263
623 * revert to using --with-secure-path option at build time, since the option
624 available in sudoers is parsed too late to be useful, and upstream says
625 it won't get fixed quickly. This reopens 85123, which I will mark as
626 forwarded. Closes: #86199, #86117, #85676
628 -- Bdale Garbee <bdale@gag.com> Mon, 26 Feb 2001 11:02:51 -0700
630 sudo (1.6.3p5-2) unstable; urgency=low
632 * lose the dh_suidregister call since it's obsolete
633 * stop using the --with-secure-path option at build time, and instead show
634 how to set it in sudoers. Closes: #85123
635 * freshen config.sub and config.guess for ia64 and hppa
636 * update sudoers man page to indicate exempt_group is on by default,
639 -- Bdale Garbee <bdale@gag.com> Sat, 10 Feb 2001 02:05:17 -0700
641 sudo (1.6.3p5-1) unstable; urgency=low
643 * new upstream version, closes: #63940, #59175, #61817, #64652, #65743
644 * this version restores core dumps before the exec, while leaving them
645 disabled during sudo's internal execution, closes: #58289
646 * update debhelper calls in rules file
648 -- Bdale Garbee <bdale@gag.com> Wed, 16 Aug 2000 00:13:15 -0600
650 sudo (1.6.2p2-1) frozen unstable; urgency=medium
652 * new upstream source resulting from direct collaboration with the upstream
653 author to fix ugly pam-related problems on Debian in 1.6.1 and later.
654 Closes: #56129, #55978, #55979, #56550, #56772
655 * include more upstream documentation, closes: #55054
656 * pam.d fragment update, closes: #56129
658 -- Bdale Garbee <bdale@gag.com> Sun, 27 Feb 2000 11:48:48 -0700
660 sudo (1.6.1-1) unstable; urgency=low
662 * new upstream source, closes: #52750
664 -- Bdale Garbee <bdale@gag.com> Fri, 7 Jan 2000 21:01:42 -0700
666 sudo (1.6-2) unstable; urgency=low
668 * drop suidregister support for this package. The sudo executable is
669 essentially worthless unless it is setuid root, and making suidregister
670 work involves shipping a non-setuid executable in the .deb and setting the
671 perms in the postinst. On a long upgrade run, this can leave the sudo
672 executable 'broken' for a long time, which is unacceptable. With this
673 version, we ship the executable setuid root in the .deb. Closes: #51742
675 -- Bdale Garbee <bdale@gag.com> Wed, 1 Dec 1999 19:59:44 -0700
677 sudo (1.6-1) unstable; urgency=low
679 * new upstream version, many options previously set at compile-time are now
680 configurable at runtime.
681 Closes: #39255, #20996, #29812, #50705, #49148, #48435, #47190, #45639
684 -- Bdale Garbee <bdale@gag.com> Tue, 23 Nov 1999 16:51:22 -0700
686 sudo (1.5.9p4-1) unstable; urgency=low
688 * new upstream version, closes: #43464
689 * empty password handling was fixed in 1.5.8, closes: #31863
691 -- Bdale Garbee <bdale@gag.com> Thu, 26 Aug 1999 00:00:57 -0600
693 sudo (1.5.9p1-1) unstable; urgency=low
695 * new upstream version
697 -- Bdale Garbee <bdale@gag.com> Thu, 15 Apr 1999 22:43:29 -0600
699 sudo (1.5.8p1-1) unstable; urgency=medium
701 * new upstream version, closes 33690
702 * add dependency on libpam-modules, closes 34215, 33432
704 -- Bdale Garbee <bdale@gag.com> Mon, 8 Mar 1999 10:27:42 -0700
706 sudo (1.5.7p4-2) unstable; urgency=medium
708 * update the pam fragment provided so that sudo works with latest pam bits,
711 -- Bdale Garbee <bdale@gag.com> Sun, 21 Feb 1999 00:22:44 -0700
713 sudo (1.5.7p4-1) unstable; urgency=low
715 * new upstream release
717 -- Bdale Garbee <bdale@gag.com> Sun, 27 Dec 1998 16:13:53 -0700
719 sudo (1.5.6p5-1) unstable; urgency=low
721 * new upstream patch release
722 * add PAM support, closes 28594
724 -- Bdale Garbee <bdale@gag.com> Mon, 2 Nov 1998 00:00:24 -0700
726 sudo (1.5.6p2-2) unstable; urgency=low
728 * update copyright file, closes 24136
729 * review and close forwarded bugs believed fixed in this upstream version,
732 -- Bdale Garbee <bdale@gag.com> Mon, 5 Oct 1998 22:30:43 -0600
734 sudo (1.5.6p2-1) unstable; urgency=low
736 * new upstream release
738 -- Bdale Garbee <bdale@gag.com> Mon, 5 Oct 1998 22:30:43 -0600
740 sudo (1.5.4-4) frozen unstable; urgency=low
742 * update postinst to use groupadd, closes 21403
743 * move the suidregister stuff earlier in postinst to ensure it always runs
745 -- Bdale Garbee <bdale@gag.com> Sun, 19 Apr 1998 22:07:45 -0600
747 sudo (1.5.4-3) frozen unstable; urgency=low
749 * change /etc/sudoers from a conffile to being handled in postinst,
751 * add suidmanager support, closes 15711
752 * add '-Wno-comment' to quiet warnings from gcc upstream maintainer is
753 unlikely to ever fix, and which just don't matter. closes 17146
754 * fix FSF address in copyright file, and submit exception for lintian
755 warning about sudo being setuid root
757 -- Bdale Garbee <bdale@gag.com> Thu, 9 Apr 1998 23:59:11 -0600
759 sudo (1.5.4-2) unstable; urgency=high
761 * patch from upstream author correcting/improving security fix
763 -- Bdale Garbee <bdale@gag.com> Tue, 13 Jan 1998 10:39:35 -0700
765 sudo (1.5.4-1) unstable; urgency=high
767 * new upstream version, includes a security fix
768 * change default editor from /bin/ae to /usr/bin/editor
770 -- Bdale Garbee <bdale@gag.com> Mon, 12 Jan 1998 23:36:41 -0700
772 sudo (1.5.3-1) unstable; urgency=medium
774 * new upstream version, closes bug 15911.
775 * rules file reworked to use debhelper
776 * implement a really gross hack to force use of the sudo-provided
777 lsearch(), since the one in libc6 is broken! This closes bugs
778 12552, 12557, 14881, 15259, 15916.
780 -- Bdale Garbee <bdale@gag.com> Sat, 3 Jan 1998 20:39:23 -0700
782 sudo (1.5.2-6) unstable; urgency=LOW
784 * don't install INSTALL in the doc directory, closes bug 13195.
786 -- Bdale Garbee <bdale@gag.com> Sun, 21 Sep 1997 17:10:40 -0600
788 sudo (1.5.2-5) unstable; urgency=LOW
792 -- Bdale Garbee <bdale@gag.com> Fri, 5 Sep 1997 00:06:22 -0600
794 sudo (1.5.2-4) unstable; urgency=LOW
796 * change TIMEOUT (how long before you have to type your password again)
797 to 15 mins, disable PASSWORD_TIMEOUT. This makes building large Debian
798 packages on slower machines much more tolerable. Closes bug 9076.
799 * touch debian/suid before debstd. Closes bug 8709.
801 -- Bdale Garbee <bdale@gag.com> Sat, 26 Apr 1997 00:48:01 -0600
803 sudo (1.5.2-3) frozen unstable; urgency=LOW
805 * patch from upstream maintainer to close Bug 6828
806 * add a debian/suid file to get debstd to leave my perl postinst alone
808 -- Bdale Garbee <bdale@gag.com> Fri, 11 Apr 1997 23:09:55 -0600
810 sudo (1.5.2-2) frozen unstable; urgency=LOW
812 * change rules to use -O2 -Wall as per standards
814 -- Bdale Garbee <bdale@gag.com> Sun, 6 Apr 1997 12:48:53 -0600
816 sudo (1.5.2-1) unstable; urgency=LOW
818 * new upstream version
819 * cosmetic changes to debian package control files
821 -- Bdale Garbee <bdale@gag.com> Wed, 30 Oct 1996 09:50:00 -0700
823 sudo (1.5-2) unstable; urgency=LOW
825 * add /usr/X11R6/bin to the end of the secure path... this makes it
826 much easier to run xmkmf, etc., during package builds. To the extent
827 that /usr/local/sbin and /usr/local/bin were already included, I see
828 no security reasons not to add this.
830 -- Bdale Garbee <bdale@gag.com> Wed, 30 Oct 1996 09:44:58 -0700
832 sudo (1.5-1) unstable; urgency=LOW
834 * New upstream version
836 * New packaging format
838 -- Bdale Garbee <bdale@gag.com> Thu, 29 Aug 1996 11:44:22 +0200
840 Tue Mar 5 09:36:41 MET 1996 Michael Meskes <meskes@informatik.rwth-aachen.de>
844 * hard code SECURE_PATH to:
845 "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
849 * enabled EXEMPTGROUP "sudo"
851 * moved timestamp dir to /var/log/sudo
853 * changed parser to check for long and short filenames (Bug#1162)
855 Wed Apr 17 13:03:31 MET DST 1996 Michael Meskes <meskes@informatik.rwth-aachen.de>
859 * New upstream source
861 * Fixed postinst script
862 (thanks to Peter Tobis <tobias@et-inf.fho-emden.de>)
864 * Removed special shadow binary. This version works with and without
865 shadow password file.
867 Mon May 20 09:35:22 MET DST 1996 Michael Meskes <meskes@debian.org>
871 * Corrected editor path to /bin/ae (Bug#3062)
873 * Set file permission to 4755 for sudo and 755 for visudo (Bug#3063)
875 Mon Jun 17 12:06:41 MET DST 1996 Michael Meskes <meskes@debian.org>
879 * New upstream version
881 * Changed sudoers permission to 440 (owner root, group root) to make
884 Wed Jun 19 10:56:54 MET DST 1996 Michael Meskes <meskes@debian.org>
888 * Applied upstream patch 1
890 Thu Jun 20 09:02:57 MET DST 1996 Michael Meskes <meskes@debian.org>
894 * Applied upstream patch 2
896 Fri Jun 28 12:49:40 MET DST 1996 Michael Meskes <meskes@debian.org>
900 * Applied upstream patch 3 (fixes problems with an NFS-mounted
904 Sun Jun 30 13:02:44 MET DST 1996 Michael Meskes <meskes@debian.org>
908 * Corrected postinst to use /usr/bin/perl instead of /bin/perl
909 [Reported by jdassen@wi.leidenuniv.nl (J.H.M.Dassen)]
911 Wed Jul 10 12:44:33 MET DST 1996 Michael Meskes <meskes@debian.org>
915 * Applied upstream patch 4 (fixes several bugs)
917 * Changed priority to optional
919 Thu Jul 11 19:23:52 MET DST 1996 Michael Meskes <meskes@debian.org>
923 * Corrected postinst to create correct permission for /etc/sudoers
926 Fri Aug 2 10:50:53 MET DST 1996 Michael Meskes <meskes@debian.org>
930 * New upstream version
933 sudo (1.4.4-2) admin; urgency=HIGH
935 * Fixed major security bug reported by Peter Tobias
936 <tobias@et-inf.fho-emden.de>
937 * Added dchanges support to debian.rules
939 sudo (1.4.5-1) admin; urgency=LOW
941 * New upstream version
942 * Minor changes to debian.rules