---
- branch: MAIN
  date: Wed Feb 28 15:22:17 UTC 2024
  files:
  - new: '1.202'
    old: '1.201'
    path: pkgsrc/security/sudo/Makefile
    pathrev: pkgsrc/security/sudo/Makefile@1.202
    type: modified
  - new: '1.134'
    old: '1.133'
    path: pkgsrc/security/sudo/distinfo
    pathrev: pkgsrc/security/sudo/distinfo@1.134
    type: modified
  id: 20240228T152217Z.92364c693829ee98daca1f3d32bb9822872828b4
  log: |
    security/sudo: update to 1.9.15p5

    1.9.15p3 (2023-12-13)

     * Always disable core dumps when sudo sends itself a fatal signal.
       Fixes a problem where sudo could potentially dump core dump when
       it re-sends the fatal signal to itself.  This is only an issue
       if the command received a signal that would normally result in
       a core dump but the command did not actually dump core.

     * Fixed a bug matching a command with a relative path name when
       the sudoers rule uses shell globbing rules for the path name.
       Bug #1062.

     * Permit visudo to be run even if the local host name is not set.
       GitHub issue #332.

     * Fixed an editing error introduced in sudo 1.9.15 that could
       prevent sudoreplay from replaying sessions correctly.
       GitHub issue #334.

     * Fixed a bug introduced in sudo 1.9.15 where "sudo -l > /dev/null"
       could hang on Linux systems.  GitHub issue #335.

     * Fixed a bug introduced in sudo 1.9.15 where Solaris privileges
       specified in sudoers were not applied to the command being run.

    1.9.15p4 (2023-12-15)

     * Fixed a bug introduced in sudo 1.9.15 that could prevent a user's
       privileges from being listed by "sudo -l" if the sudoers entry
       in /etc/nsswitch.conf contains "[SUCCESS=return]".  This did not
       affect the ability to run commands via sudo.  Bug #1063.

    1.9.15p5 (2023-12-30)

     * Fixed evaluation of the "lecture", "listpw", "verifypw", and
       "fdexec" sudoers Defaults settings when used without an explicit
       value.  Previously, if specified without a value they were
       evaluated as boolean "false", even when the negation operator
       ('!') was not present.

     * Fixed a bug introduced in sudo 1.9.14 that prevented LDAP
       netgroup queries using the NETGROUP_BASE setting from being
       performed.

     * Sudo will now transparently rename a user's lecture file from
       the older name-based path to the newer user-ID-based path.
       GitHub issue #342.

     * Fixed a bug introduced in sudo 1.9.15 that could cause a memory
       allocation failure if sysconf(_SC_LOGIN_NAME_MAX) fails.  Bug #1066.
  module: pkgsrc
  subject: 'CVS commit: pkgsrc/security/sudo'
  unixtime: '1709133737'
  user: taca