sudo 1.8.24 released

--===============7342030548030651278==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-sha1; boundary="21315_Sat_Aug_18_12_59_07_MDT_2018"

--21315_Sat_Aug_18_12_59_07_MDT_2018
Content-Type: text/plain; charset=us-ascii

In addition to bug fixes, sudo 1.8.24 builds on the changes in
1.8.23 to merge the LDAP/SSSD and file-based lookup code.  This has
allowed the removal almost 1,500 lines of code from the LDAP and
SSSD backends.

Source:
    https://www.sudo.ws/dist/sudo-1.8.24.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.24.tar.gz

SHA256 checksum:
    b488557a198ecef30b7ad4011b59a66232dec2364ad956e11d8e17906c225be8
MD5 checksum:
    ddba16ba9f34cd7d66ea5719bb1a428e

Binary packages:
    https://www.sudo.ws/download.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.8.24 and 1.8.23

 * The LDAP and SSS back-ends now use the same rule evaluation code
   as the sudoers file backend.  This builds on the work in sudo
   1.8.23 where the formatting functions for "sudo -l" output were
   shared.  The handling of negated commands in SSS and LDAP is
   unchanged.

 * Fixed a regression introduced in 1.8.23 where "sudo -i" could
   not be used in conjunction with --preserve-env=VARIABLE.  Bug #835.

 * cvtsudoers can now parse base64-encoded attributes in LDIF files.

 * Random insults are now more random.

 * Fixed the noexec wordexp(3) test on FreeBSD.

 * Added SUDO_CONV_PREFER_TTY flag for conversation function to
   tell sudo to try writing to /dev/tty first. Can be used in
   conjunction with SUDO_CONV_INFO_MSG and SUDO_CONV_ERROR_MSG.

 * Sudo now supports an arbitrary number of groups per user on
   Solaris.  Previously, only the first 64 groups were found.
   This should remove the need to set "max_groups" in sudo.conf.

 * Fixed typos in the OpenLDAP sudo schema.  Bugs #839 and #840.

 * Fixed a race condition when building with parallel make.
   Bug #842.

 * Fixed a duplicate free when netgroup_base in ldap.conf is set
   to an invalid value.

 * Fixed a bug introduced in sudo 1.8.23 on AIX that could prevent
   local users and groups from being resolved properly on systems
   that have users stored in NIS, LDAP or AD.

 * Added a workaround for an AIX bug exposed by a change in sudo
   1.8.23 that prevents the terminal mode from being restored when
   I/O logging is enabled.

 * On systems using PAM, sudo now ignores the PAM_NEW_AUTHTOK_REQD
   and PAM_AUTHTOK_EXPIRED errors from PAM account management if
   authentication is disabled for the user.  This fixes a regression
   introduced in sudo 1.8.23.  Bug #843.

 * Fixed an ambiguity in the sudoers manual in the description and
   definition of User, Runas, Host, and Cmnd Aliases.  Bug #834.

 * Fixed a bug that resulted in only the first window size change
   event being logged.

 * Fixed a bug on HP-UX systems introduced in sudo 1.8.22 that
   caused sudo to prompt for a password every time when tty-based
   time stamp files were in use.

 * Fixed a compilation problem on systems that define O_PATH or
   O_SEARCH in fnctl.h but do not define O_DIRECTORY.  Bug #844.

--21315_Sat_Aug_18_12_59_07_MDT_2018
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
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=4UdY
-----END PGP SIGNATURE-----

--21315_Sat_Aug_18_12_59_07_MDT_2018--


--===============7342030548030651278==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-announce mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-announce

--===============7342030548030651278==--