Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package sudo for openSUSE:Factory checked in
at 2021-08-23 10:07:39
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/sudo (Old)
and /work/SRC/openSUSE:Factory/.sudo.new.1899 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "sudo"
Mon Aug 23 10:07:39 2021 rev:125 rq:912793 version:1.9.7p2
Changes:
--------
--- /work/SRC/openSUSE:Factory/sudo/sudo.changes 2021-08-02
12:05:27.565651062 +0200
+++ /work/SRC/openSUSE:Factory/.sudo.new.1899/sudo.changes 2021-08-23
10:07:49.412270630 +0200
@@ -1,0 +2,49 @@
+Fri Jul 30 07:35:39 UTC 2021 - peter czanik <pe...@czanik.hu>
+
+- update to 1.9.7p2
+- enabled openssl support for secure central session
+ recording collection (without it's clear text)
+- fixed SLES12 build
+ * When formatting JSON output, octal numbers are now stored as
+ strings, not numbers. The JSON spec does not actually support
+ octal numbers with a '0' prefix.
+ * Fixed a compilation issue on Solaris 9.
+ * Sudo now can handle the getgroups() function returning a different
+ number of groups for subsequent invocations. GitHub PR #106.
+ * When loading a Python plugin, python_plugin.so now verifies
+ that the module loaded matches the one we tried to load. This
+ allows sudo to display a more useful error message when trying
+ to load a plugin with a name that conflicts with a Python module
+ installed in the system location.
+ * Sudo no longer sets the the open files resource limit to "unlimited"
+ while it runs. This avoids a problem where sudo's closefrom()
+ emulation would need to close a very large number of descriptors
+ on systems without a way to determine which ones are actually open.
+ * Sudo now includes a configure check for va_copy or __va_copy and
+ only defines its own version if the configure test fails.
+ * Fixed a bug in sudo's utmp file handling which prevented old
+ entries from being reused. As a result, the utmp (or utmpx)
+ file was appended to unnecessarily. GitHub PR #108.
+ * Fixed a bug introduced in sudo 1.9.7 that prevented sudo_logsrvd
+ from accepting TLS connections when OpenSSL is used. Bug #988.
+ * Fixed an SELinux sudoedit bug when the edited temporary file
+ could not be opened. The sesh helper would still be run even
+ when there are no temporary files available to install.
+ * Fixed a compilation problem on FreeBSD.
+ * The sudo_noexec.so file is now built as a module on all systems
+ other than macOS. This makes it possible to use other libtool
+ implementations such as slibtool. On macOS shared libraries and
+ modules are not interchangeable and the version of libtool shipped
+ with sudo must be used.
+ * Fixed a few bugs in the getgrouplist() emulation on Solaris when
+ reading from the local group file.
+ * Fixed a bug in sudo_logsrvd that prevented periodic relay server
+ connection retries from occurring in "store_first" mode.
+ * Disabled the nss_search()-based getgrouplist() emulation on HP-UX
+ due to a crash when the group source is set to "compat" in
+ /etc/nsswitch.conf. This is probably due to a mismatch between
+ include/compat/nss_dbdefs.h and what HP-UX uses internally. On
+ HP-UX we now just cycle through groups the slow way using
+ getgrent(). Bug #978.
+
+-------------------------------------------------------------------
Old:
----
sudo-1.9.7.tar.gz
sudo-1.9.7.tar.gz.sig
New:
----
sudo-1.9.7p2.tar.gz
sudo-1.9.7p2.tar.gz.sig
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ sudo.spec ++++++
--- /var/tmp/diff_new_pack.sIAiAL/_old 2021-08-23 10:07:50.836268969 +0200
+++ /var/tmp/diff_new_pack.sIAiAL/_new 2021-08-23 10:07:50.836268969 +0200
@@ -22,7 +22,7 @@
%define use_usretc 1
%endif
Name: sudo
-Version: 1.9.7
+Version: 1.9.7p2
Release: 0
Summary: Execute some commands as root
License: ISC
@@ -41,6 +41,7 @@
BuildRequires: audit-devel
BuildRequires: cyrus-sasl-devel
BuildRequires: groff
+BuildRequires: libopenssl-devel
BuildRequires: libselinux-devel
BuildRequires: openldap2-devel
BuildRequires: pam-devel
@@ -115,6 +116,7 @@
--enable-shell-sets-home \
--enable-warnings \
--enable-python \
+ --enable-openssl \
--with-sendmail=%{_sbindir}/sendmail \
--with-sudoers-mode=0440 \
--with-env-editor \
@@ -122,8 +124,13 @@
--with-passprompt="[sudo] password for %%p: " \
--with-rundir=%{_localstatedir}/lib/sudo \
--with-sssd
+%if 0%{?sle_version} < 150000
+# the SLES12 way
+make %{?_smp_mflags} V=1
+%else
# -B required to make every build give the same result - maybe from bad build
deps in Makefiles?
%make_build -B
+%endif
%install
%make_install install_uid=`id -u` install_gid=`id -g`
