Overview

Request 121250 accepted

- update to 1.8.5
Some of the changes:
* /etc/environment is no longer read directly on Linux systems when
PAM is used. Sudo now merges the PAM environment into the user's
environment which is typically set by the pam_env module.
* The plugin API has been extended
* The policy plugin's init_session function is now called by the
parent sudo process, not the child process that executes the command
This allows the PAM session to be open and closed in the same process,
which some PAM modules require.
* A new group provider plugin, system_group, is included
* Fixed a potential security issue in the matching of hosts against
an IPv4 network specified in sudoers.The flaw may allow a user who
is authorized to run commands on hosts belonging to one IPv4
network to run commands on a different host (CVE-2012-2337) (forwarded request 121223 from vitezslav_cizek)

Loading...
Request History
Marcus Meissner's avatar

msmeissn created request

- update to 1.8.5
Some of the changes:
* /etc/environment is no longer read directly on Linux systems when
PAM is used. Sudo now merges the PAM environment into the user's
environment which is typically set by the pam_env module.
* The plugin API has been extended
* The policy plugin's init_session function is now called by the
parent sudo process, not the child process that executes the command
This allows the PAM session to be open and closed in the same process,
which some PAM modules require.
* A new group provider plugin, system_group, is included
* Fixed a potential security issue in the matching of hosts against
an IPv4 network specified in sudoers.The flaw may allow a user who
is authorized to run commands on hosts belonging to one IPv4
network to run commands on a different host (CVE-2012-2337) (forwarded request 121223 from vitezslav_cizek)


Factory Auto's avatar

factory-auto added a reviewer

the package is still building for repository openSUSE_Factory


Factory Auto's avatar

factory-auto added a reviewer

Please review sources


Ruediger Oertel's avatar

oertel approved review

reviewed by ro


Stephan Kulow's avatar

coolo accepted request

checkin


Saul Goodman's avatar

licensedigger accepted review

{"approve": "preliminary, version number changed"}


Factory Auto's avatar

factory-auto accepted review

Builds for repo openSUSE_Factory


Ruediger Oertel's avatar

oertel accepted review

reviewed by ro

openSUSE Build Service is sponsored by