[ubuntu/quantal] sudo 1.8.3p2-1ubuntu1 (Accepted)

Wed May 23 06:00:50 UTC 2012

sudo (1.8.3p2-1ubuntu1) quantal; urgency=low

  * Merge from debian/testing, remaining changes:
    - debian/patches/keep_home_by_default.patch:
      + Set HOME in initial_keepenv_table. (rebased for 1.8.3p1)
    - debian/patches/lp927828-fix-abort-in-pam-modules-when-timestamp-valid.patch
      + Fix Abort in some PAM modules when timestamp is valid. (LP: #927828)
    - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4
      addresses. Based on upstream patch.
    - debian/rules:
      + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
      + install man/man8/sudo_root.8 in both flavours (Ubuntu specific)
      + install apport hooks
      + The ubuntu-sudo-as-admin-successful.patch was taken upstream by
        Debian however it requires a --enable-admin-flag configure flag to
        actually enable it in both flavours.
    - debian/control:
      + Mark Debian Vcs-* as XS-Debian-Vcs-*
      + update debian/control
    - debian/sudoers:
      + grant admin group sudo access
    - debian/sudo-ldap.dirs, debian/sudo.dirs:
      + add usr/share/apport/package-hooks
    - debian/sudo.preinst:
      + avoid conffile prompt by checking for known default /etc/sudoers
        and if found installing the correct default /etc/sudoers file.
        Modified for updated default sudoers. Aproach taken is different
        from Debian. Maybe this should now be dropped, since an LTS was
        released.

  * Dropped changes:
    - debian/patches/CVE-2012-0809.patch:
      + dropped, included in this new upstream release.
    - debian/patches/enable_badpass.patch:
      + dropped as Debian chose to set this by default in the sudoers.

sudo (1.8.3p2-1) unstable; urgency=high

  * new upstream version, closes: #657985 (CVE-2012-0809)
  * patch from Pino Toscano to only use selinux on Linux, closes: #655894

sudo (1.8.3p1-3) unstable; urgency=low

  * patch from Moritz Muehlenhoff enables hardened build flags, closes: #655417
  * replacement postinst script from Mike Beattie using shell instead of Perl
  * include systemd service file from Michael Stapelberg, closes: #639633
  * add init.d status support, closes: #641782
  * make sudo-ldap package manage a sudoers entry in nsswitch.conf,
    closes: #610600, #639530
  * enable mail_badpass in the default sudoers file, closes: #641218
  * enable selinux support, closes: #655510

sudo (1.8.3p1-2) unstable; urgency=low

  * if upgrading from squeeze, and the sudoers file is unmodified, avoid
    the packaging system prompting the user about a change they didn't make
    now that sudoers is a conffile, closes: #612532, #636049
  * add a recommendation for the use of visudo to the sudoers.d/README file,
    closes: #648104

Date: Tue, 01 May 2012 16:12:45 +0100
Changed-By: Dmitrijs Ledkovs <dmitrij.ledkov at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Steve Langasek <steve.langasek at canonical.com>
https://launchpad.net/ubuntu/quantal/+source/sudo/1.8.3p2-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Tue, 01 May 2012 16:12:45 +0100
Source: sudo
Binary: sudo sudo-ldap
Architecture: source
Version: 1.8.3p2-1ubuntu1
Distribution: quantal
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Dmitrijs Ledkovs <dmitrij.ledkov at ubuntu.com>
Description: 
 sudo       - Provide limited super user privileges to specific users
 sudo-ldap  - Provide limited super user privileges to specific users
Closes: 610600 612532 636049 639530 639633 641218 641782 648104 655417 655510 655894 657985
Launchpad-Bugs-Fixed: 927828
Changes: 
 sudo (1.8.3p2-1ubuntu1) quantal; urgency=low
 .
   * Merge from debian/testing, remaining changes:
     - debian/patches/keep_home_by_default.patch:
       + Set HOME in initial_keepenv_table. (rebased for 1.8.3p1)
     - debian/patches/lp927828-fix-abort-in-pam-modules-when-timestamp-valid.patch
       + Fix Abort in some PAM modules when timestamp is valid. (LP: #927828)
     - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4
       addresses. Based on upstream patch.
     - debian/rules:
       + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
       + install man/man8/sudo_root.8 in both flavours (Ubuntu specific)
       + install apport hooks
       + The ubuntu-sudo-as-admin-successful.patch was taken upstream by
         Debian however it requires a --enable-admin-flag configure flag to
         actually enable it in both flavours.
     - debian/control:
       + Mark Debian Vcs-* as XS-Debian-Vcs-*
       + update debian/control
     - debian/sudoers:
       + grant admin group sudo access
     - debian/sudo-ldap.dirs, debian/sudo.dirs:
       + add usr/share/apport/package-hooks
     - debian/sudo.preinst:
       + avoid conffile prompt by checking for known default /etc/sudoers
         and if found installing the correct default /etc/sudoers file.
         Modified for updated default sudoers. Aproach taken is different
         from Debian. Maybe this should now be dropped, since an LTS was
         released.
 .
   * Dropped changes:
     - debian/patches/CVE-2012-0809.patch:
       + dropped, included in this new upstream release.
     - debian/patches/enable_badpass.patch:
       + dropped as Debian chose to set this by default in the sudoers.
 .
 sudo (1.8.3p2-1) unstable; urgency=high
 .
   * new upstream version, closes: #657985 (CVE-2012-0809)
   * patch from Pino Toscano to only use selinux on Linux, closes: #655894
 .
 sudo (1.8.3p1-3) unstable; urgency=low
 .
   * patch from Moritz Muehlenhoff enables hardened build flags, closes: #655417
   * replacement postinst script from Mike Beattie using shell instead of Perl
   * include systemd service file from Michael Stapelberg, closes: #639633
   * add init.d status support, closes: #641782
   * make sudo-ldap package manage a sudoers entry in nsswitch.conf,
     closes: #610600, #639530
   * enable mail_badpass in the default sudoers file, closes: #641218
   * enable selinux support, closes: #655510
 .
 sudo (1.8.3p1-2) unstable; urgency=low
 .
   * if upgrading from squeeze, and the sudoers file is unmodified, avoid
     the packaging system prompting the user about a change they didn't make
     now that sudoers is a conffile, closes: #612532, #636049
   * add a recommendation for the use of visudo to the sudoers.d/README file,
     closes: #648104
Checksums-Sha1: 
 9f1abd269d49368c43c005dc7ba7c859ced80618 1986 sudo_1.8.3p2-1ubuntu1.dsc
 37d70b133f809116ce631229fa0e727d9f5125ad 1536943 sudo_1.8.3p2.orig.tar.gz
 51e846f7e64a3739c7b8eb1fcf8508c82143963e 30579 sudo_1.8.3p2-1ubuntu1.debian.tar.gz
Checksums-Sha256: 
 2b379de46a32158fa89be36faf9833dd3da5ee3dabb48738512786184df2c816 1986 sudo_1.8.3p2-1ubuntu1.dsc
 7edcf02ef4dc4f26f524726e8faaa90d7939772c186409ab150d2934e3a9ba31 1536943 sudo_1.8.3p2.orig.tar.gz
 a1f71de37fd479061ecf908d8ac6fc58b8f73bfb0fb63f553788d77ee67f89f9 30579 sudo_1.8.3p2-1ubuntu1.debian.tar.gz
Files: 
 cb737630fb1ca0b840e11c9bb05d0d9b 1986 admin optional sudo_1.8.3p2-1ubuntu1.dsc
 6d4282a1530c541f7900fa8dfcf2a882 1536943 admin optional sudo_1.8.3p2.orig.tar.gz
 8386698bfd8a5cad6ffa243849d45f3b 30579 admin optional sudo_1.8.3p2-1ubuntu1.debian.tar.gz
Original-Maintainer: Bdale Garbee <bdale at gag.com>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
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=gR/f
-----END PGP SIGNATURE-----