sudo 1.9.7 released

--===============4841027460514879339==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="73597_Wed_May_12_06_51_58_MDT_2021"

--73597_Wed_May_12_06_51_58_MDT_2021
Content-Type: text/plain; charset=us-ascii

Sudo version 1.9.7 is now available.  In addition to bug fixes,
sudo 1.9.7 adds a relay mode to sudo_logsrvd.  This can be used to
create a hierarchy of log servers and supports both real-time
relaying as well as a store-and-forward mode.

Source:
    https://www.sudo.ws/dist/sudo-1.9.7.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/sudo-1.9.7.tar.gz

SHA256 checksum:
    2bbe7c2d6699b84d950ef9a43f09d4d967b8bc244b73bc095c4202068ddbe549
MD5 checksum:
    1ed8b73ba56c9b05ed22681b7b92d1b2

Binary packages:
    https://www.sudo.ws/download.html#binary
    https://github.com/sudo-project/sudo/releases/tag/SUDO_1_9_7

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.9.7 and 1.9.6p1

 * The "fuzz" Makefile target now runs all the fuzzers for 8192
   passes (can be overridden via the FUZZ_RUNS variable).  This makes
   it easier to run the fuzzers in-tree.  To run a fuzzer indefinitely,
   set FUZZ_RUNS=-1, e.g. "make FUZZ_RUNS=-1 fuzz".

 * Fixed fuzzing on FreeBSD where the ld.lld linker returns an
   error by default when a symbol is multiply-defined.

 * Added support for determining local IPv6 addresses on systems
   that lack the getifaddrs() function.  This now works on AIX,
   HP-UX and Solaris (at least).  Bug #969.

 * Fixed a bug introduced in sudo 1.9.6 that caused "sudo -V" to
   report a usage error.  Also, when invoked as sudoedit, sudo now
   allows a more restricted set of options that matches the usage
   statement and documentation.  GitHub issue #95.

 * Fixed a crash in sudo_sendlog when the specified certificate
   or key does not exist or is invalid.  Bug #970.

 * Fixed a compilation error when sudo is configured with the
   --disable-log-client option.

 * Sudo's limited support for SUCCESS=return entries in nsswitch.conf
   is now documented.  Bug #971.

 * Sudo now requires autoconf 2.70 or higher to regenerate the
   configure script.  Bug #972.

 * sudo_logsrvd now has a relay mode which can be used to create
   a hierarchy of log servers.  By default, when a relay server is
   defined, messages from the client are forwarded immediately to
   the relay.  However, if the "store_first" setting is enabled,
   the log will be stored locally until the command completes and
   then relayed.  Bug #965.

 * Sudo now links with OpenSSL by default if it is available unless
   the --disable-openssl configure option is used or both the
   --disable-log-client and --disable-log-server configure options
   are specified.

 * Fixed configure's Python version detection when the version minor
   number is more than a single digit, for example Python 3.10.

 * The sudo Python module tests now pass for Python 3.10.

 * Sudo will now avoid changing the datasize resource limit
   as long as the existing value is at least 1GB.  This works around
   a problem on 64-bit HP-UX where it is not possible to exactly
   restore the original datasize limit.  Bug #973.

 * Fixed a race condition that could result in a hang when sudo is
   executed by a process where the SIGCHLD handler is set to SIG_IGN.
   This fixes the bug described by GitHub PR #98.

 * Fixed an out-of-bounds read in sudoedit and visudo when the
   EDITOR, VISUAL or SUDO_EDITOR environment variables end in an
   unescaped backslash.  Also fixed the handling of quote characters
   that are escaped by a backslash.  GitHub issue #99.

 * Fixed a bug that prevented the "log_server_verify" sudoers option
   from taking effect.

 * The sudo_sendlog utility has a new -s option to cause it to stop
   sending I/O records after a user-specified elapsed time.  This
   can be used to test the I/O log restart functionality of sudo_logsrvd.

 * Fixed a crash introduced in sudo 1.9.4 in sudo_logsrvd when
   attempting to restart an interrupted I/O log transfer.

 * The TLS connection timeout in the sudoers log client was previously
   hard-coded to 10 seconds.  It now uses the value of log_server_timeout.

 * The configure script now outputs a summary of the user-configurable
   options at the end, separate from output of configure script tests.
   Bug #820.

 * Corrected the description of which groups may be specified via the
   -g option in the Runas_Spec section.  Bug #975.

--73597_Wed_May_12_06_51_58_MDT_2021
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
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=l2SB
-----END PGP SIGNATURE-----

--73597_Wed_May_12_06_51_58_MDT_2021--


--===============4841027460514879339==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-announce mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-announce

--===============4841027460514879339==--