lp:ubuntu/oneiric-security/sudo

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

53. By Marc Deslauriers on 2013-02-27

* SECURITY UPDATE: authentication bypass via clock set to epoch
  - debian/patches/CVE-2013-1775.patch: ignore time stamp file if it is
    set to epoch in check.c.
  - CVE-2013-1775

52. By Tyler Hicks on 2012-05-15

* SECURITY UPDATE: Properly handle multiple netmasks in sudoers Host and
  Host_List values
  - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4
    addresses. Based on upstream patch.
  - CVE-2012-2337

51. By Kees Cook on 2011-09-11

* debian/patches/enable_badpass.patch: turn on "mail_badpass" by default:
  - attempting sudo without knowing a login password is as bad as not
    being listed in the sudoers file, especially if getting the password
    wrong means doing the access-check-email-notification never happens
    (Closes: 641218).

50. By Michael Vogt on 2011-05-23

* Merge from debian/unstable, remaining changes:
  - debian/patches/keep_home_by_default.patch:
    + Set HOME in initial_keepenv_table.
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
    + install man/man8/sudo_root.8 (Ubuntu specific)
    + install apport hooks
  - debian/sudoers:
    + grant admin group sudo access
  - debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
* drop debian/patches/CVE-2011-0010.patch, applied upstream now

49. By Scott Moser on 2011-04-21

* debian/sudo.preinst:
  - if well-known ec2 vmbuilder file is found, write a file in
    sudoers.d for the 'ubuntu' user (LP: #768625)

48. By Michael Vogt on 2011-04-15

* debian/sudo.preinst:
  - do not consider the ec2 vmbuilder default sudoers file
    verbatim as its actually customized (LP: #761689)

47. By Steve Langasek on 2011-04-13

releasing version 1.7.4p4-5ubuntu6

46. By Steve Langasek on 2011-04-13

add bug reference

45. By Steve Langasek on 2011-04-13

debian/patches/keep_home_by_default.patch: Set HOME in
initial_keepenv_table.

44. By Michael Vogt on 2011-03-25

* debian/sudo.preinst:
  - avoid conffile prompt by checking for known default /etc/sudoers
    and if found installing the correct default /etc/sudoers file
    (LP: #690873)