one more bug fixed

[debian/sudo] / debian / changelog

diff --git a/debian/changelog b/debian/changelog
index 50b27c513a5f9cf8b71b31a3728098ed64575a82..66169c8f094c09ba139807c3a8788dc4febebc29 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -1,12 +1,14 @@
-sudo (1.7.4-1) UNRELEASED; urgency=low
+sudo (1.7.4p4-1) UNRELEASED; urgency=low
 
-  * new upstream version
+  * new upstream version, includes fix for flaw in Runas group matching
+    (CVE-2010-2956), closes: #595935
   * handle transition of /var/run/sudo to /var/lib/sudo better, to avoid
     re-lecturing existing users, and to clean up after ourselves on upgrade,
     and remove the RAMRUN section from README.Debian since the new state dir
     should fix the original problem, closes: #585514
+  * deliver README.Debian to both package flavors, closes: #593579
 
- -- Bdale Garbee <bdale@gag.com>  Mon, 02 Aug 2010 23:26:50 -0400
+ -- Bdale Garbee <bdale@gag.com>  Tue, 07 Sep 2010 11:35:22 -0600
 
 sudo (1.7.2p7-1) unstable; urgency=high