sudo 1.9.16rc2 released

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

The second release candidate for sudo 1.9.16 is now available.
Unless a major bug is found, the GA release of sudo 1.9.16 will
occur next week.  Sudo 1.9.16 is primarily a bug fix release.

Source:
    https://www.sudo.ws/dist/beta/sudo-1.9.16rc2.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.9.16rc2.tar.gz

SHA256 checksum:
    8f700f5c95718c03660c223554a3cbdab6e50b14f52b8fa09db18a8e9cb12031

MD5 checksum:
    eb53788a4d37ace71b09acb9661c3756

Binary packages:
    https://www.sudo.ws/getting/beta_packages/

For a list of download mirror sites, see:
    https://www.sudo.ws/getting/download_mirrors/

Sudo web site:
    https://www.sudo.ws/

Major changes between sudo 1.9.16rc1 and 1.9.16rc2:

 * Fixed a bug on systems where "dev_t" is a signed 32-bit type.
   Previously, the terminal device number could have been be passed
   incorrectly to the plugin.

 * An invalid "ttydev" value passed from the front-end is now ignored
   instead of causing a fatal error.

 * Added a simple regress test to make sure "dev_t" formatting and
   parsing works consistently.

 * The C99 "restrict" keyword is now used in more places.

Major changes between sudo 1.9.16b2 and 1.9.16rc1:

 * Updated translations from translationproject.org.

 * The new --with-secure-path-value configure option can be used
   to set the value of "secure_path" in the default sudoers file.
   GitHub issue #387.

Major changes between sudo 1.9.16b1 and 1.9.16b2:

 * Update translations from translationproject.org.

 * A sudoers schema for IBM Directory Server (aka IBM Tivoli Directory
   Server, IBM Security Directory Server, and IBM Security Verify
   Directory) is now included.

 * When cross-compiling sudo, the configure script now assumes that
   the snprintf() function is C99-compliant if the C compiler
   supports the C99 standard.  Previously, configure would use
   sudo's own snprintf() when cross-compiling.

Major changes between sudo 1.9.15p5 and 1.9.16b1:

 * Added the "cmddenial_message" sudoers option to provide additional
   information to the user when a command is denied by the sudoers
   policy.  The default message is still displayed.

 * The time stamp used for file-based logs is now more consistent
   with the time stamp produced by syslog.  GitHub issues #327.

 * Sudo will now warn the user if it can detect the user's terminal
   but cannot determine the path to the terminal device.  The sudoers
   time stamp file will now use the terminal device number directly.
   GitHub issue #329.

 * The embedded copy of zlib has been updated to version 1.3.1.

 * Improved error handling if generating the list of signals and signal
   names fails at build time.

 * Fixed a compilation issue on Linux systems without process_vm_readv().

 * Fixed cross-compilation with WolfSSL.

 * Added a "json_compact" value for the sudoers "log_format" option
   which can be used when logging to a file.  The existing "json"
   value has been aliased to "json_pretty".  In a future release,
   "json" will be an alias for "json_compact".  GitHub issue #357.

 * A new "pam_silent" sudoers option has been added which may be
   negated to avoid suppressing output from PAM authentication modules.
   GitHub issue #216.

 * Fixed several cvtsudoers JSON output problems.
   GitHub issues #369, #370, #371, #373, #381.

 * When sudo runs a command in a pseudo-terminal and the user's
   terminal is revoked, the pseudo-terminal's foreground process
   group will now receive SIGHUP before the terminal is revoked.
   This emulates the behavior of the session leader exiting and is
   consistent with what happens when, for example, an ssh session
   is closed.  GitHub issue #367.

 * Fixed "make test" with Python 3.12.  GitHub issue #374.

 * In schema.ActiveDirectory, fixed the quoting in the example command.
   GitHub issue #376.

 * Paths specified via a Chdir_Spec or Chroot_Spec in sudoers may
   now be double-quoted.

 * Sudo insults are now included by default, but disabled unless
   the --with-insults configure option is specified or the "insults"
   sudoers option is enabled.

 * The default sudoers file now enables the "secure_path" option
   by default and preserves the EDITOR, VISUAL, and SUDO_EDITOR
   environment variables when running visudo.
-----BEGIN PGP SIGNATURE-----
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=ambP
-----END PGP SIGNATURE-----
____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers