From d192bd70e78c88509a0384c2dbc5b0a587c7b5dc Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Fri, 29 Apr 2022 19:03:24 -0600 Subject: Sudo 1.9.11 --- NEWS | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) (limited to 'NEWS') diff --git a/NEWS b/NEWS index ba78c3137..3923f11ae 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,57 @@ +What's new in Sudo 1.9.11 + + * Fixed a crash in the Python module with Python 3.9.10 on some + systems. Additionally, "make check" now passes for Python 3.9.10. + + * Error messages sent via email now include more details, including + the file name and the line number and column of the error. + Multiple errors are sent in a single message. Previously, only + the first error was included. + + * Fixed logging of parse errors in JSON format. Previously, + the JSON logger would not write entries unless the command and + runuser were set. These may not be known at the time a parse + error is encountered. + + * Fixed a potential crash parsing sudoers lines larger than twice + the value of LINE_MAX on systems that lack the getdelim() function. + + * The tests run by "make check" now unset the LANGUAGE environment + variable. Otherwise, localization strings will not match if + LANGUAGE is set to a non-English locale. Bug #1025. + + * The "starttime" test now passed when run under Debian faketime. + Bug #1026. + + * The Kerberos authentication module now honors the custom password + prompt if one has been specified. + + * The embedded copy of zlib has been updated to version 1.2.12. + + * Updated the version of libtool used by sudo to version 2.4.7. + + * Sudo now defines _TIME_BITS to 64 on systems that define __TIMESIZE + in the header files (currently only GNU libc). This is required + to allow the use of 64-bit time values on some 32-bit systems. + + * Sudo's "intercept" and "log_subcmds" options no longer force the + command to run in its own pseudo-terminal. + + * Fixed a bug in sudo_logsrvd when run in store-first relay mode + where the commit point messages sent by the server were incorrect + if the command was suspended or received a window size change + event. + + * The "intercept" and "log_subcmds" functionality will now use + ptrace(2) on Linux systems that support seccomp(2) filtering. + This has the advantage of working for both static and dynamic + binaries and can work with sudo's SELinux RBAC mode. Currently, + this is limited to systems with 32-bit and 64-bit Intel and + 64-bit ARM CPUs. Support for other CPU types can be added after + sufficient testing. + + * New Georgian translation from translationproject.org. + What's new in Sudo 1.9.10 * Added new "log_passwords" and "passprompt_regex" sudoers options. -- cgit v1.2.1