fix for 596493 from upstream

[debian/sudo] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 888b0a3041fb210738a555fcac24c2edf0c407ab..4772750f3ef10c517f63c407d1823ce4af906d07 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,3 +1,57 @@
+sudo (1.7.4p4-2.squeeze.2) stable; urgency=low
+
+  * patch from upstream to resolve interoperability problem between HOME in
+    env_keep and the -H flag, originally closed #596493, applying this to
+    to squeeze also closes: #614232
+
+ -- Bdale Garbee <bdale@gag.com>  Sun, 20 Feb 2011 09:35:07 -0700
+
+sudo (1.7.4p4-2.squeeze.1) testing; urgency=low
+
+  * patch from upstream to fix special case in password checking code
+    when only the gid is changing, closes #609641
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 26 Jan 2011 09:08:12 +1000
+
+sudo (1.7.4p4-2) unstable; urgency=low
+
+  * add a NEWS item about change in $HOME handling that impacts programs
+    like pbuilder
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 08 Sep 2010 14:29:16 -0600
+
+sudo (1.7.4p4-1) unstable; urgency=high
+
+  * new upstream version, urgency high due to fix for flaw in Runas group 
+    matching (CVE-2010-2956), closes: #595935
+  * handle transition of /var/run/sudo to /var/lib/sudo better, to avoid
+    re-lecturing existing users, and to clean up after ourselves on upgrade,
+    and remove the RAMRUN section from README.Debian since the new state dir
+    should fix the original problem, closes: #585514
+  * deliver README.Debian to both package flavors, closes: #593579
+
+ -- Bdale Garbee <bdale@gag.com>  Tue, 07 Sep 2010 12:22:42 -0600
+
+sudo (1.7.2p7-1) unstable; urgency=high
+
+  * new upstream release with security fix for secure path (CVE-2010-1646),
+    closes: #585394
+  * move timestamps from /var/run/sudo to /var/lib/sudo, so that the state
+    about whether to give the lecture is preserved across reboots even when
+    RAMRUN is set, closes: #581393
+  * add a note to README.Debian about LDAP needing an entry in 
+    /etc/nsswitch.conf, closes: #522065
+  * add a note to README.Debian about how to turn off lectures if using
+    RAMRUN in /etc/default/rcS, closes: #581393
+
+ -- Bdale Garbee <bdale@gag.com>  Thu, 10 Jun 2010 15:42:14 -0600
+
+sudo (1.7.2p6-1) unstable; urgency=low
+
+  * new upstream version fixing CVE-2010-1163, closes: #578275, #570737
+
+ -- Bdale Garbee <bdale@gag.com>  Mon, 19 Apr 2010 10:45:47 -0600
+
 sudo (1.7.2p5-1) unstable; urgency=low
 
   * new upstream release, closes a bug filed upstream regarding missing man