lp:ubuntu/oneiric-security/sudo

Created by Ubuntu Package Importer on 2012-05-16 and last modified on 2013-02-27
Get this branch:
bzr branch lp:ubuntu/oneiric-security/sudo
Members of Ubuntu branches can upload to this branch. Log in for directions.

Branch merges

Related bugs

Related blueprints

Branch information

Owner:
Ubuntu branches
Review team:
Ubuntu Development Team
Status:
Mature

Recent revisions

53. By Marc Deslauriers on 2013-02-27

* SECURITY UPDATE: authentication bypass via clock set to epoch
  - debian/patches/CVE-2013-1775.patch: ignore time stamp file if it is
    set to epoch in check.c.
  - CVE-2013-1775

52. By Tyler Hicks on 2012-05-15

* SECURITY UPDATE: Properly handle multiple netmasks in sudoers Host and
  Host_List values
  - debian/patches/CVE-2012-2337.patch: Don't perform IPv6 checks on IPv4
    addresses. Based on upstream patch.
  - CVE-2012-2337

51. By Kees Cook on 2011-09-11

* debian/patches/enable_badpass.patch: turn on "mail_badpass" by default:
  - attempting sudo without knowing a login password is as bad as not
    being listed in the sudoers file, especially if getting the password
    wrong means doing the access-check-email-notification never happens
    (Closes: 641218).

50. By Michael Vogt on 2011-05-23

* Merge from debian/unstable, remaining changes:
  - debian/patches/keep_home_by_default.patch:
    + Set HOME in initial_keepenv_table.
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
    + install man/man8/sudo_root.8 (Ubuntu specific)
    + install apport hooks
  - debian/sudoers:
    + grant admin group sudo access
  - debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
* drop debian/patches/CVE-2011-0010.patch, applied upstream now

49. By Scott Moser on 2011-04-21

* debian/sudo.preinst:
  - if well-known ec2 vmbuilder file is found, write a file in
    sudoers.d for the 'ubuntu' user (LP: #768625)

48. By Michael Vogt on 2011-04-15

* debian/sudo.preinst:
  - do not consider the ec2 vmbuilder default sudoers file
    verbatim as its actually customized (LP: #761689)

47. By Steve Langasek on 2011-04-13

releasing version 1.7.4p4-5ubuntu6

46. By Steve Langasek on 2011-04-13

add bug reference

45. By Steve Langasek on 2011-04-13

debian/patches/keep_home_by_default.patch: Set HOME in
initial_keepenv_table.

44. By Michael Vogt on 2011-03-25

* debian/sudo.preinst:
  - avoid conffile prompt by checking for known default /etc/sudoers
    and if found installing the correct default /etc/sudoers file
    (LP: #690873)

Branch metadata

Branch format:
Branch format 7
Repository format:
Bazaar repository format 2a (needs bzr 1.16 or later)
Stacked on:
lp:ubuntu/quantal/sudo
This branch contains Public information 
Everyone can see this information.

Subscribers