sudo 1.8.31 released

--===============7005023312515739444==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="64351_Thu_Jan_30_11_02_16_MST_2020"

--64351_Thu_Jan_30_11_02_16_MST_2020
Content-Type: text/plain; charset=us-ascii

Sudo 1.8.31 is now available.  This version fixes a serious bug
when the "pwfeedback" option is enabled in sudoers that can lead
to a buffer overflow.  See https://www.sudo.ws/alerts/pwfeedback.html
for full details.

Source:
    https://www.sudo.ws/dist/sudo-1.8.31.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.8.31.tar.gz

SHA256 checksum:
    7ea8d97a3cee4c844e0887ea7a1bd80eb54cc98fd77966776cb1a80653ad454f
MD5 checksum:
    ce17ff6e72a70f8d5dabba8abf3cd2de

Binary packages:
    https://www.sudo.ws/download.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.8.31 and 1.8.30

 * Fixed CVE-2019-18634, a buffer overflow when the "pwfeedback"
   sudoers option is enabled on systems with uni-directional pipes.

 * The "sudoedit_checkdir" option now treats a user-owned directory
   as writable, even if it does not have the write bit set at the
   time of check.  Symbolic links will no longer be followed by
   sudoedit in any user-owned directory.  Bug #912

 * Fixed sudoedit on macOS 10.15 and above where the root file system
   is mounted read-only.  Bug #913.

 * Fixed a crash introduced in sudo 1.8.30 when suspending sudo
   at the password prompt.  Bug #914.

 * Fixed compilation on systems where the mmap MAP_ANON flag
   is not available.  Bug #915.

--64351_Thu_Jan_30_11_02_16_MST_2020
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iQIcBAEBCAAGBQJeMxooAAoJEKn0wCHOpHD7izEP/jATQNiSHMe84NsIgaigBnzD
sLcwShtFXRBXxSsinsPOx/1P0DiwS4p4XNIVo+AjM2HoewqYEd0Uc/L+7StA+PE6
+OtqB6ajiLzcXkznI6slkF5JHvr/ztBXpX2mxUff5ntLDE8EQSe/+u4+ybllgL9z
x+uDOwTfYG77s0/7hYuoyTHgGu05awOTU36g6Fjcx3NwNbOmAek0/touj123majo
M8BzIl5icSe33eZwGLthqc5hlBRy3OOvZVMwLx9S2i3pkh+biJRTuQ6hw4ZTmljL
CuRD4gpGohJ/prgwmKTqXfvlwE/baFhMSZX94KuBLxKZCSia5l6cn0UmOu1ehTj2
RdKV2MuvrMAXljlnVCL2bMdX0IBFj8if4PQKtKMDE+47VaFRwCkWD/5c3s4RBOhU
3bECpa8P2mO0tdo/cV+yr6Sk6IytT2kgyG2LbWibXbZUeP1l/FWcMKz38yJEAxGn
HS5plbp8SBEjA1vo7d2NH/w8kwZtFgqyK+MfHvtEn36MB8X/xqR2TSoLWJgLTl4P
uT4tOj57yr3KEXhjL96EhnrZqLQQA9gGMUxnqlV/nGv9uWzTGFQS/S6KQV6YzMUp
uguNoLZAY3h3Xy//O5UIyNjO4bZ2n9syo5eYAylusLGD0vEVD28MAvp/b8JxTBXu
D35kHXMFWyG62H2LITl0
=li8N
-----END PGP SIGNATURE-----

--64351_Thu_Jan_30_11_02_16_MST_2020--


--===============7005023312515739444==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-announce mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-announce

--===============7005023312515739444==--