lp:debian/wheezy/sudo

Created by James Westby and last modified
Get this branch:
bzr branch lp:debian/wheezy/sudo
Members of Ubuntu branches can upload to this branch. Log in for directions.

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Status:
Development

Recent revisions

32. By Andreas Beckmann

* Non-maintainer upload with maintainer approval.
* Backport from 1.8.7-1: "recognize lenny and squeeze unmodified sudoers" to
  avoid dpkg questions about modified conffiles on upgrades to wheezy.
  (Closes: #660594)
* *.preinst: Recognize the unmodified /etc/sudoers from sudo-ldap/lenny.

31. By Michael Gilbert <email address hidden>

* Non-maintainer upload by the Security Team.
* Fix cve-2013-1775: authentication bypass when the clock is set to the UNIX
  epoch [00:00:00 UTC on 1 January 1970] (closes: #701838).
* Fix cve-2013-1776: session id hijacking from another authorized tty
  (closes: #701839).

30. By Bdale Garbee

* new upstream version
* patch to use flock on hurd, run autoconf in rules, closes: #655883
* patch to avoid calling unlink with null pointer on hurd, closes: #655948
* patch to actually use hardening build flags, closes: #655417
* fix sudo-ldap.postinst syntax issue, closes: #669576

29. By Dimitri John Ledkov

* Non-maintainer upload.
* SECURITY UPDATE: Properly handle netmasks in sudoers Host and Host_List
  values (LP: #1000276, Closes: #673766, CVE-2012-2337)
  - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4
    addresses. Based on upstream patch.

28. By Bdale Garbee

* new upstream version, closes: #657985 (CVE-2012-0809)
* patch from Pino Toscano to only use selinux on Linux, closes: #655894

27. By Bdale Garbee

* patch from Moritz Muehlenhoff enables hardened build flags, closes: #655417
* replacement postinst script from Mike Beattie using shell instead of Perl
* include systemd service file from Michael Stapelberg, closes: #639633
* add init.d status support, closes: #641782
* make sudo-ldap package manage a sudoers entry in nsswitch.conf,
  closes: #610600, #639530
* enable mail_badpass in the default sudoers file, closes: #641218
* enable selinux support, closes: #655510

26. By Bdale Garbee

* if upgrading from squeeze, and the sudoers file is unmodified, avoid
  the packaging system prompting the user about a change they didn't make
  now that sudoers is a conffile, closes: #612532, #636049
* add a recommendation for the use of visudo to the sudoers.d/README file,
  closes: #648104

25. By Bdale Garbee

new upstream version, closes: #646478

24. By Bdale Garbee

new upstream version, closes: #639391, #639568

23. By Bdale Garbee

[ Luca Capello ]
* debian/rules improvements, closes: #642535
  + mv upstream sample.* files to the examples folder.
  - do not call dh_installexamples.

[ Bdale Garbee ]
* patch from upstream for SIGBUS on sparc64, closes: #640304
* use common-session-noninteractive in the pam config to reduce log noise
  when sudo is used in cron, etc, closes: #519700
* patch from Steven McDonald to fix segfault on startup under certain
  conditions, closes: #639568
* add a NEWS entry regarding the secure_path change made in 1.8.2-1,
  closes: #639336

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:debian/sudo
This branch contains Public information 
Everyone can see this information.

Subscribers