~ubuntu-branches/ubuntu/quantal/sudo/quantal-updates : changes

~ubuntu-branches/ubuntu/quantal/sudo/quantal-updates » Changes from revision 61

From Revision 61 to 42

Rev	Summary	Authors	Tags	Date
61	debian/sudo.sudo.init, debian/sudo-ldap.sudo.init: Set times... debian/sudo.sudo.init, debian/sudo-ldap.sudo.init: Set timestamps to epoch in init scripts so they are properly invalidated. (LP: #1223297)	Marc Deslauriers	1.8.5p2-1ubuntu1.2	10 years ago
60	* SECURITY UPDATE: authentication bypass via clock set to ep... * SECURITY UPDATE: authentication bypass via clock set to epoch - debian/patches/CVE-2013-1775.patch: ignore time stamp file if it is set to epoch in plugins/sudoers/check.c. - CVE-2013-1775	Marc Deslauriers	1.8.5p2-1ubuntu1.1	11 years ago
59	* Merge from debian/testing (LP: #1024154), remaining change... * Merge from debian/testing (LP: #1024154), remaining changes: - debian/patches/keep_home_by_default.patch: + Set HOME in initial_keepenv_table. - debian/rules: + compile with --without-lecture --with-tty-tickets (Ubuntu specific) + install man/man8/sudo_root.8 in both flavours (Ubuntu specific) + install apport hooks + The ubuntu-sudo-as-admin-successful.patch was taken upstream by Debian however it requires a --enable-admin-flag configure flag to actually enable it in both flavours. - debian/control: + Mark Debian Vcs-* as XS-Debian-Vcs-* + update debian/control - debian/sudoers: + grant admin group sudo access - debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks - debian/sudo.pam: + Use pam_env to read /etc/environment and /etc/default/locale environment files. Reading ~/.pam_environment is not permitted due to security reasons. * Dropped changes: - debian/patches/lp927828-fix-abort-in-pam-modules-when-timestamp-valid.patch + Fixed upstream in 1.8.5 - debian/patches/CVE-2012-2337.patch: + Fixed upstream in 1.8.4p5 - debian/patches/pam_env_merge.patch: + Feature released upstream in 1.8.5 - debian/{sudo,sudo-ldap}.{preinst,postinst,postrm}: + Drop Ubuntu-specific sudoers file migration code because the only upgrade path to quantal is from precise. All necessary sudoers file migration will have already been done by the time this version of the sudo package is installed.	Tyler Hicks	1.8.5p2-1ubuntu1	11 years ago
58	* debian/patches/pam_env_merge.patch: Merge the PAM environm... * debian/patches/pam_env_merge.patch: Merge the PAM environment into the user environment (LP: #982684) * debian/sudo.pam: Use pam_env to read /etc/environment and /etc/default/locale environment files. Reading ~/.pam_environment is not permitted due to security reasons.	Steve Langasek	1.8.3p2-1ubuntu2	11 years ago
57	Merge version 1.8.3p2-1 Merge version 1.8.3p2-1	Steve Langasek	1.8.3p2-1ubuntu1	11 years ago
56	* SECURITY UPDATE: Properly handle netmasks in sudoers Host ... * SECURITY UPDATE: Properly handle netmasks in sudoers Host and Host_List values (LP: #1000276) - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4 addresses. Based on upstream patch. - CVE-2012-2337	Tyler Hicks	1.8.3p1-1ubuntu5	11 years ago
55	Fix Abort in some PAM modules when timestamp is valid. (LP: ... Fix Abort in some PAM modules when timestamp is valid. (LP: #927828)	TJ (Ubuntu Contribut...	1.8.3p1-1ubuntu4	11 years ago
54	* SECURITY UPDATE: permissions bypass via format string * SECURITY UPDATE: permissions bypass via format string - debian/patches/CVE-2012-0809.patch: fix format string vulnerability in src/sudo.c. - CVE-2012-0809	Marc Deslauriers	1.8.3p1-1ubuntu3	12 years ago
53	* debian/sudo.preinst: * debian/sudo.preinst: - updated to avoid conffile prompt by migrating to the new sudoers file changes in Precise. (LP: #894410)	Marc Deslauriers	1.8.3p1-1ubuntu2	12 years ago
52	* Merge from debian/testing, remaining changes: * Merge from debian/testing, remaining changes: - debian/patches/keep_home_by_default.patch: + Set HOME in initial_keepenv_table. (rebased for 1.8.3p1) - debian/patches/enable_badpass.patch: turn on "mail_badpass" by default: + attempting sudo without knowing a login password is as bad as not being listed in the sudoers file, especially if getting the password wrong means doing the access-check-email-notification never happens (rebased for 1.8.3p1) - debian/rules: + compile with --without-lecture --with-tty-tickets (Ubuntu specific) + install man/man8/sudo_root.8 (Ubuntu specific) + install apport hooks + The ubuntu-sudo-as-admin-successful.patch was taken upstream by Debian however it requires a --enable-admin-flag configure flag to actually enable it. - debian/sudoers: + grant admin group sudo access - debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks - debian/sudo.preinst: + avoid conffile prompt by checking for known default /etc/sudoers and if found installing the correct default /etc/sudoers file	Marc Deslauriers	1.8.3p1-1ubuntu1	12 years ago
51	* debian/patches/enable_badpass.patch: turn on "mail_badpass... * debian/patches/enable_badpass.patch: turn on "mail_badpass" by default: - attempting sudo without knowing a login password is as bad as not being listed in the sudoers file, especially if getting the password wrong means doing the access-check-email-notification never happens (Closes: 641218).	Kees Cook	1.7.4p6-1ubuntu2	12 years ago
50	* Merge from debian/unstable, remaining changes: * Merge from debian/unstable, remaining changes: - debian/patches/keep_home_by_default.patch: + Set HOME in initial_keepenv_table. - debian/rules: + compile with --without-lecture --with-tty-tickets (Ubuntu specific) + install man/man8/sudo_root.8 (Ubuntu specific) + install apport hooks - debian/sudoers: + grant admin group sudo access - debian/sudo-ldap.dirs, debian/sudo.dirs: + add usr/share/apport/package-hooks * drop debian/patches/CVE-2011-0010.patch, applied upstream now	Michael Vogt	1.7.4p6-1ubuntu1	12 years ago
49	* debian/sudo.preinst: * debian/sudo.preinst: - if well-known ec2 vmbuilder file is found, write a file in sudoers.d for the 'ubuntu' user (LP: #768625)	Scott Moser	1.7.4p4-5ubuntu8	13 years ago
48	* debian/sudo.preinst: * debian/sudo.preinst: - do not consider the ec2 vmbuilder default sudoers file verbatim as its actually customized (LP: #761689)	Michael Vogt	1.7.4p4-5ubuntu7	13 years ago
47	releasing version 1.7.4p4-5ubuntu6 releasing version 1.7.4p4-5ubuntu6	Steve Langasek	1.7.4p4-5ubuntu6	13 years ago
46	add bug reference add bug reference	Steve Langasek		13 years ago
45	debian/patches/keep_home_by_default.patch: Set HOME in debian/patches/keep_home_by_default.patch: Set HOME in initial_keepenv_table.	Steve Langasek		13 years ago
44	* debian/sudo.preinst: * debian/sudo.preinst: - avoid conffile prompt by checking for known default /etc/sudoers and if found installing the correct default /etc/sudoers file (LP: #690873)	Michael Vogt	1.7.4p4-5ubuntu5	13 years ago
43	debian/rules: The ubuntu-sudo-as-admin-successful.patch was ... debian/rules: The ubuntu-sudo-as-admin-successful.patch was taken upstream by Debian however it requires a --enable-admin-flag configure flag to actually enable it. (LP: #706045)	Bryce Harrington	1.7.4p4-5ubuntu4	13 years ago
42	* SECURITY UPDATE: privilege escalation via -g when using gr... * SECURITY UPDATE: privilege escalation via -g when using group Runas_List - debian/patches/CVE-2011-0010.patch: prompt for password when the user is running sudo as himself but as a different group - CVE-2011-0010	Jamie Strandboge	1.7.4p4-5ubuntu3	13 years ago

Older »