sudo 1.8.30 released

--===============6323137704430069880==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="14117_Tue_Dec_31_14_27_54_MST_2019"

--14117_Tue_Dec_31_14_27_54_MST_2019
Content-Type: text/plain; charset=us-ascii

Sudo 1.8.30 is now available; this is primarily a bug fix release.

Source:
    https://www.sudo.ws/dist/sudo-1.8.30.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.30.tar.gz

SHA256 checksum:
    a35ad3ddc7465703e04190d3ff0b8d78ded9246749becf9a014dcb9c31c579e7
MD5 checksum:
    d56cd5835b1cc9852bd76ddaaa572475

Binary packages:
    https://www.sudo.ws/download.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.8.30 and 1.8.29

 * Fixed a warning on macOS introduced in sudo 1.8.29 when sudo
   attempts to set the open file limit to unlimited.  Bug #904.

 * Sudo now closes file descriptors before changing uids.  This
   prevents a non-root process from interfering with sudo's ability
   to close file descriptors on systems that support the prlimit(2)
   system call.

 * Sudo now treats an attempt to run "sudo sudoedit" as simply
   "sudoedit".  If the sudoers file contains a fully-qualified path
   to sudoedit, sudo will now treat it simply as "sudoedit" (with
   no path).  Visudo will will now treat a fully-qualified path
   to sudoedit as an error.  Bug #871.

 * Fixed a bug introduced in sudo 1.8.28 where sudo would warn about
   a missing /etc/environment file on AIX and Linux when PAM is not
   enabled.  Bug #907

 * Fixed a bug on Linux introduced in sudo 1.8.29 that prevented
   the askpass program from running due to an unlimited stack size
   resource limit.  Bug #908.

 * If a group provider plugin has optional arguments, the argument list
   passed to the plugin is now NULL terminated as per the documentation.

 * The user's time stamp file is now only updated if both authentication
   and approval phases succeed.  This is consistent with the behavior
   of sudo prior to version 1.8.23.  Bug #910

 * The new allow_unknown_runas_id sudoers setting can be used to
   enable or disable the use of unknown user or group IDs.  Previously,
   sudo would always allow unknown user or group IDs if the sudoers
   entry permitted it, including via the "ALL" alias.  As of sudo
   1.8.30, the admin must explicitly enable support for unknown IDs.

 * The new runas_check_shell sudoers setting can be used to require
   that the runas user have a shell listed in the /etc/shells file.
   On many systems, users such as "bin", do not have a valid shell
   and this flag can be used to prevent commands from being run as
   those users.

 * Fixed a problem restoring the SELinux tty context during reboot
   if mctransd is killed before sudo finishes.  GitHub Issue #17.

 * Fixed an intermittent warning on NetBSD when sudo restores the
   initial stack size limit.

--14117_Tue_Dec_31_14_27_54_MST_2019
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJeC71aAAoJEKn0wCHOpHD7JRsP/Rxt8opoznI6A+XFrH6kjv3O
6Up9u5AW9WJC+I/oG8J92pRoDyQdnmv9/4pWoZboh37xCZPXGFe99KWsh/W2SMP8
6pLWUAnZN6oCsveg0NPM7NeBEdPJoLFAgv0z8WwDWUWqee1fi/SPf8drVUFXrS0A
BPqpcUdfac6PDz9IU2PnO+R2t+DR2MygGXD6IJMF5491ytRuVFZBOcmrPPe7uUBV
u1mhyyGiO3Lj6sd9+LzmUTHjyUH9MnfxrzK9LwCxY57ad8OThhNtRdiApVGbMn4T
M4HjPYjbIeK6DaEqvGGSYyGBwsvfjGyxsDVF9ScnPTFkmTXBp8lj5x6U+5WzAX0L
8WesQpGB0XLkfSFEyx3aSObta+AaPiAPo7eqYBYmyNe+skUt7wTdUf2JXvZSOXch
2dBIgt6AZJMwpAmZCfN+CLDmqTm9h1odvO+cRD803CUZZ4WHBTnbNhJL587EwdN+
rswZtmDf2NK76SLPLhS+mXLZeOu0ZWEtbuZ9G17UKpRA9ncaG+60/SVdITTv1ixL
vVYbQqyklWmjeLsr/04Cqfhj5S0gUol4rV2hQmEfNbmnEHB9XfYUTNfTiLqV+2d6
x16n7jJzvJx0Mk+5Q/OQ2mDlDdLFrt4CxHwlAG1PO5YTzPRReLPvE7ONC4uNCrOj
NPRf9smwjPsDvrIy9zt2
=MM4Q
-----END PGP SIGNATURE-----

--14117_Tue_Dec_31_14_27_54_MST_2019--


--===============6323137704430069880==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-announce mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-announce

--===============6323137704430069880==--