sudo 1.9.6b1 released

--===============7391258144882741475==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="12352_Tue_Mar__2_21_03_09_MST_2021"

--12352_Tue_Mar__2_21_03_09_MST_2021
Content-Type: text/plain; charset=us-ascii

The first beta version of sudo 1.9.6 is now available.  This is
primarily a bug fix release that contains fixes to minor issues
found while fuzzing the sudo code base.

Source:
    https://www.sudo.ws/dist/beta/sudo-1.9.6b1.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.9.6b1.tar.gz

SHA256 checksum:
    795e30c04726536eb6130ace966580e8495c86df0a3866cec34356731720dd6a

MD5 checksum:
    3b0c4f6d2f627a8544062e3801126c09

Binary packages:
    https://www.sudo.ws/dist/beta/packages/index.html#binary

For a list of download mirror sites, see:
    https://www.sudo.ws/download_mirrors.html

Sudo web site:
    https://www.sudo.ws/

Sudo web site mirrors:
    https://www.sudo.ws/mirrors.html

Major changes between sudo 1.9.6b1 and 1.9.5p2:

 * Fixed a sudo_sendlog compilation problem with the AIX xlC compiler.

 * Fixed a regression introduced in sudo 1.9.4 where the
   --disable-root-mailer configure option had no effect.

 * Added a --disable-leaks configure option that avoids some
   memory leaks on exit that would otherwise occur.  This is intended
   to be used with development tools that measure memory leaks.  It
   is not safe to be use in production at this time.

 * Plugged some memory leaks identified by oss-fuzz and ASAN.

 * Fixed the handling of sudoOptions for an LDAP sudoRole that
   contains multiple sudoCommands.  Previously, some of the options
   would only be applied to the first sudoCommand.

 * Fixed a potential out of bounds read in the parsing of NOTBEFORE
   and NOTAFTER sudoers command options (and their LDAP equivalents).

 * The parser used for reading I/O log JSON files is now more
   resilient when processing invalid JSON.

 * Fixed typos that prevented "make uninstall" from working.
   GitHub issue #87.

 * Fixed a regression introduced in sudo 1.9.4 where the last line
   in a sudoers file might not have a terminating NUL character
   added if no newline was present.

 * Integrated oss-fuzz and LLVM's libFuzzer with sudo.  The new
   --enable-fuzzer configure option can be combined with the
   --enable-sanitizer option to build sudo with fuzzing support.
   Multiple fuzz targets are available for fuzzing different parts
   of sudo.  Fuzzers are built and tested via "make fuzz" or as part
   of "make check" (even when sudo is not built with fuzzing support).
   Fuzzing support currently requires the LLVM clang compiler (not gcc).

 * Fixed the --enable-static-sudoers configure option.
   GitHub issue #92.

 * Fixed a potential out of bounds read sudo when is run by a user
   with more groups than the value of "max_groups" in sudo.conf.

 * Added an "admin_flag" sudoers option to make the use of the
   ~/.sudo_as_admin_successful file configurable on systems where
   sudo is build with the --enable-admin-flag configure option.
   This mostly affects Ubuntu and its derivatives.  GitHub issue #56.

 * The "max_groups" setting in sudo.conf is now limited to 1024.
   This setting is obsolete and should no longer be needed.

 * Fixed a bug in the tilde expansion of "CHROOT=dir" and "CWD=dir"
   sudoers command options.  A path "~/foo" was expanded to
   "/home/userfoo" instead of "/home/user/foo".  This also affects
   the runchroot and runcwd Defaults settings.

 * Fixed a bug on systems without a native getdelim(3) function
   where very long lines could cause parsing of the sudoers file
   to end prematurely.  Bug #960.

 * Fixed a potential integer overflow when converting the
   timestamp_timeout and passwd_timeout sudoers settings to a
   timespec struct.

 * The default for the "group_source" setting in sudo.conf is now
   "dynamic" on macOS.  Recent versions of macOS do not reliably
   return all of a user's non-local groups via getgroups(2), even
   when _DARWIN_UNLIMITED_GETGROUPS is defined.  Bug #946.

--12352_Tue_Mar__2_21_03_09_MST_2021
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCAAdFiEEWdHpzLorN2cE/dNbqfTAIc6kcPsFAmA/Cn0ACgkQqfTAIc6k
cPtBIBAAoAIY6LreE5fJcynV8Hen8TTwGKWay1aPdYUlhDzISYKE1w455/DfNrpa
zzcXZENTvap9MA+9VLhjfWvCBmzY/4kK7ycUkaK4pocWCydBNuDHXPBcWUeHvrLq
drYRap9ClA7d/nP8uqiic8XrDpF1dC3OP4VJ3TrLQLHWf5Csaeok28Ebhq8Y1Hou
jRRyRfzuKhZR681CYdgdjQpS1eZlrGldRnrltIr+w6PdVcdxMsMy0eM/zMysSOxy
Afv2Fe+NgjlpGa7xIGwhzMnrFUPalrWb90WlO8cXCfS3l6Coc1Ftr69aXxKjZfBe
6g5L9ewOb6S6LQWoZTWw21+A+QE6TwJU3f18WojW/23oubb9+SQJH0h4wZ5lUXBW
YUL9UleH5fN+i9Aj0+y31+0nagSXHb7Othp49lC8d3ZsIQweuVvCI90dxQHzEnSh
nleI9XRlVhPqLMqtNQjcszKp+Mx3By+R4OfZfqI+RZJswCCBSmtBHihPhvOU2oZb
GUIctjPyYo2ZNrNTHfKagj+BH2ZQ2AbojCcC24uskyNdurFcczY+/vCVP207z7fY
MK/p9zycSmMXN85b5Ko4t0TkjsuKelzFNutaLPBpxMqHtND/jP0hksSVzU56Q3oX
RAAsYr1JwwH4uvFKAhayU2/p/PATHdfmJmd93gBQLHhXRRDFxb4=
=E4b3
-----END PGP SIGNATURE-----

--12352_Tue_Mar__2_21_03_09_MST_2021--


--===============7391258144882741475==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers

--===============7391258144882741475==--