sudo 1.9.17rc1 released

--===============8048477317237764788==
Content-Type: multipart/signed; protocol="application/pgp-signature";
  micalg=pgp-; boundary="77441_Mon_Jun__9_08_32_31_MDT_2025"

--77441_Mon_Jun__9_08_32_31_MDT_2025
Content-Type: text/plain; charset=us-ascii

The first release candidate for sudo 1.9.17 is now available.
Unless a major bug is found, the GA release of sudo 1.9.17 will
occur next week.  Sudo 1.9.17 is primarily a bug fix release.

Source:
    https://www.sudo.ws/dist/beta/sudo-1.9.17rc1.tar.gz
    ftp://ftp.sudo.ws/pub/sudo/beta/sudo-1.9.17rc1.tar.gz

SHA256 checksum:
    1787f05ff88a7de75325360688c011eec05b3b21ed43c729a08e099afea61ccf

MD5 checksum:
    a4d20c7b3b5796516af392963c579785

Binary packages:
    https://www.sudo.ws/getting/beta_packages/

For a list of download mirror sites, see:
    https://www.sudo.ws/getting/download_mirrors/

Sudo web site:
    https://www.sudo.ws/

Major changes between sudo 1.9.17rc1 and 1.9.16p2:

 * Sudo now uses the NODEV macro consistently. Bug #1074.

 * Fixed a bug where the "ALL" command in a sudoers rule would
   override a previous NOSETENV tag.  Command tags are inherited
   from previous Cmnds in a Cmnd_Spec_List.  There is a special
   case for the SETENV tag with the "ALL" command, where SETENV is
   implied if no explicit SETENV or NOSETENV tag is specified.  This
   special case did not take into account that a NOSETENV tag that
   was inherited should override this behavior.

 * If sudo is run via ssh without a terminal and a password is
   required, it now suggest using ssh's "-t" option.

 * Fixed the display of timeout values in the "sudo -V" output
   on systems without a C99-compliant snprintf() function.

 * Quieted a number of minor Coverity warnings.

 * Fixed a problem running sudo from a serial console on Linux when
   the command is run in a pseudo-terminal (the default).

 * Fixed a crash in sudo which could occur if there was a fatal
   error after the user was validated but before the command was
   actually run.

 * Fixed a number of man page style warnings.  The "lint" make target
   in the docs directory will now run groff with warnings enabled
   if it is available.  Bug #1075.

 * The "ignore_dot" sudoers setting is now on by default.  There
   is now a "--disable-ignore-dot" configure option to disable it.
   The "--with-ignore-dot" configure option has been deprecated.

 * Fixed a problem with the "pwfeedback" option where an initial
   backspace would reduce the maximum length allowed for the password.
   GitHub issue #439.

 * Fixed minor grammar and spelling problems in the man pages.

 * Fixed a bug where a user could avoid entering a password for
   "sudo -l command" if they specified their own user or group name
   via the "-u" or "-g" options.

 * Avoid potential password guessing based on timing attacks on
   the strcmp() function on systems without PAM or a crypt() function
   where plaintext passwords are stored in the shadow password file.

 * Fixed a potential information leak where "sudo -l command" could
   be used to determine whether an executable exists in a directory
   that they do not have search access to.

 * Sudo uses TCSAFLUSH, not TCSADRAIN, when disabling echo once
   again.  A long time ago sudo changed from using TCSAFLUSH to
   TCSADRAIN due to some systems having bugs related to TCSAFLUSH.
   That should no longer be a concern.  Using TCSAFLUSH ensures
   that password input that has been received by the kernel, but
   not yet read by sudo, will be discarded and not echoed.

 * Added the SUDO_TTY environment variable if the user has a terminal.
   This can be used to find the user's original tty device when sudo
   runs the command in its own pseudo-terminal.  GitHub issue #447.

 * New Cantonese translation for sudo.

--77441_Mon_Jun__9_08_32_31_MDT_2025
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
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=hKSp
-----END PGP SIGNATURE-----

--77441_Mon_Jun__9_08_32_31_MDT_2025--


--===============8048477317237764788==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers

--===============8048477317237764788==--