This bug was fixed in the package sudo - 1.8.5p2-1ubuntu1
---------------
sudo (1.8.5p2-1ubuntu1) quantal; urgency=low
* Merge from debian/testing (LP: #1024154), remaining changes:
- debian/patches/keep_home_by_default.patch:
+ Set HOME in initial_keepenv_table.
- debian/rules:
+ compile with --without-lecture --with-tty-tickets (Ubuntu specific)
+ install man/man8/sudo_root.8 in both flavours (Ubuntu specific)
+ install apport hooks
+ The ubuntu-sudo-as-admin-successful.patch was taken upstream by
Debian however it requires a --enable-admin-flag configure flag to
actually enable it in both flavours.
- debian/control:
+ Mark Debian Vcs-* as XS-Debian-Vcs-*
+ update debian/control
- debian/sudoers:
+ grant admin group sudo access
- debian/source_sudo.py, debian/sudo-ldap.dirs, debian/sudo.dirs:
+ add usr/share/apport/package-hooks
- debian/sudo.pam:
+ Use pam_env to read /etc/environment and /etc/default/locale
environment files. Reading ~/.pam_environment is not permitted due to
security reasons.
* Dropped changes:
-
debian/patches/lp927828-fix-abort-in-pam-modules-when-timestamp-valid.patch
+ Fixed upstream in 1.8.5
- debian/patches/CVE-2012-2337.patch:
+ Fixed upstream in 1.8.4p5
- debian/patches/pam_env_merge.patch:
+ Feature released upstream in 1.8.5
- debian/{sudo,sudo-ldap}.{preinst,postinst,postrm}:
+ Drop Ubuntu-specific sudoers file migration code because the only
upgrade path to quantal is from precise. All necessary sudoers file
migration will have already been done by the time this version of the
sudo package is installed.
sudo (1.8.5p2-1) unstable; urgency=low
* new upstream version
* patch to use flock on hurd, run autoconf in rules, closes: #655883
* patch to avoid calling unlink with null pointer on hurd, closes: #655948
* patch to actually use hardening build flags, closes: #655417
* fix sudo-ldap.postinst syntax issue, closes: #669576
-- Tyler Hicks <[email protected]> Mon, 16 Jul 2012 14:01:42 +0200
** Changed in: sudo (Ubuntu)
Status: Confirmed => Fix Released
** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2012-2337
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1024154
Title:
Please merge sudo 1.8.5p2-1 (main) from Debian testing (main)
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1024154/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
