Changelog for sudo-1.7.6p2-0.19.1.x86_64.rpm :
Tue Mar 5 13:00:00 2013 lijewski.stefanAATTgmail.com
- added two security fixes:

* CVE-2013-1775 (bnc#806919)
+ sudo-1.7.6p2-CVE-2013-1775.patch

* CVE-2013-1776 (bnc#806921)
+ sudo-1.7.6p2-CVE-2013-1776.patch

Fri Jun 1 14:00:00 2012 vcizekAATTsuse.com
- set global ldap option before ldap init (bnc#760697)

Fri May 18 14:00:00 2012 vcizekAATTsuse.com
- open and close PAM session in the same process (bnc#751453)

Wed May 16 14:00:00 2012 vcizekAATTsuse.com
- fix for CVE-2012-2337 (bnc#762327)

Mon Jan 2 13:00:00 2012 vcizekAATTsuse.cz
- escape values passed to ldap_search (bnc#724490)

Tue Dec 13 13:00:00 2011 vcizekAATTsuse.com
- manpage claimed keeping DISPLAY environment variable (bnc#720181)

Mon Aug 29 14:00:00 2011 puzelAATTsuse.com
- update to sudo-1.7.6p2 (bnc#681296)
- see /usr/share/doc/packages/sudo/NEWS

Thu Jan 27 13:00:00 2011 cprauseAATTnovell.com
- added openldap schema file (bnc#667558)

Thu Jan 13 13:00:00 2011 puzelAATTnovell.com
- add sudo-CVE-2011-0010.patch (bnc#663881)

Mon Jun 28 14:00:00 2010 jengelhAATTmedozas.de
- use %_smp_mflags

Tue Jun 15 14:00:00 2010 pascal.bleserAATTopensuse.org
- update to 1.7.2p7:

* portability fixes
- changes from 1.7.2p6:

* Handle duplicate variables in the environment

* visudo: fix a crash when checking a sudoers file that has aliases
that reference themselves

* aliases: fix use after free in error message when a duplicate
alias exists

* visudo: prevent NULL dereference in printf()
- removed sudo-CVE-2010-1163.patch (merged upstream)
- removed sudo-CVE-2010-1646.patch (merged upstream)

Wed Jun 2 14:00:00 2010 puzelAATTnovell.com
- add sudo-CVE-2010-1646.patch (bnc#594738)

Tue May 18 14:00:00 2010 puzelAATTnovell.com
- add sudo-CVE-2010-1163.patch (bnc#594738)

Wed Feb 24 13:00:00 2010 prusnakAATTsuse.cz
- updated to 1.7.2p4

* Fixed the expansion of the %h escape in #include file names
introduced in sudo 1.7.1.

* Fixed a a bug where the negation operator in a Cmnd_List
was not being honored.

* No longer produce a parse error when #includedir references
a directory that contains no valid filenames.

* The sudo.man.pl and sudoers.man.pl files are now included
in the distribution for people who wish to regenerate the man pages.

* Fixed the emulation of krb5_get_init_creds_opt_alloc() for MIT kerberos.

* When authenticating via PAM, set PAM_RUSER and PAM_RHOST early
so they can be used during authentication.

* Fix printing of entries with multiple host entries on
a single line.

* Fix use after free when sending error messages via email.

* Use setrlimit64(), if available, instead of setrlimit()
when setting AIX resource limits since rlim_t is 32bits.

* Fix size arg when realloc()ing include stack.

* Avoid a duplicate fclose() of the sudoers file.

* Fix a bug that could allow users with permission to run sudoedit
to run arbitrary commands.

Tue Jan 26 13:00:00 2010 jengelhAATTmedozas.de
- SPARC requires large PIE model

Mon Jul 13 14:00:00 2009 prusnakAATTsuse.cz
- updated to 1.7.2

* A new #includedir directive is available in sudoers. This can be
used to implement an /etc/sudo.d directory. Files in an includedir
are not edited by visudo unless they contain a syntax error.

* The -g option did not work properly when only setting the group
(and not the user). Also, in -l mode the wrong user was displayed
for sudoers entries where only the group was allowed to be set.

* Fixed a problem with the alias checking in visudo which
could prevent visudo from exiting.

* Sudo will now correctly parse the shell-style /etc/environment
file format used by pam_env on Linux.

* When doing password and group database lookups, sudo will only
cache an entry by name or by id, depending on how the entry was
looked up. Previously, sudo would cache by both name and id
from a single lookup, but this breaks sites that have multiple
password or group database names that map to the same uid or
gid.

* User and group names in sudoers may now be enclosed in double
quotes to avoid having to escape special characters.

* BSM audit fixes when changing to a non-root uid.

* Experimental non-Unix group support. Currently only works with
Quest Authorization Services and allows Active Directory groups
fixes for Minix-3.

* For Netscape/Mozilla-derived LDAP SDKs the certificate and key
paths may be specified as a directory or a file. However, version
5.0 of the SDK only appears to support using a directory (despite
documentation to the contrary). If SSL client initialization
fails and the certificate or key paths look like they could be
default file name, strip off the last path element and try again.

* A setenv() compatibility fix for Linux systems, where a NULL
value is treated the same as an empty string and the variable
name is checked against the NULL pointer.

Mon Apr 27 14:00:00 2009 prusnakAATTsuse.cz
- updated to 1.7.1

* A new Defaults option \"pwfeedback\" will cause sudo to provide visual
feedback when the user is entering a password.

* A new Defaults option \"fast_glob\" will cause sudo to use the fnmatch()
function for file name globbing instead of glob(). When this option
is enabled, sudo will not check the file system when expanding wildcards.
This is faster but a side effect is that relative paths with wildcard
will no longer work.

* The file name specified with the #include directive may now include
a %h escape which is expanded to the short form of hostname.

* The -k flag may now be specified along with a command, causing the
user\'s timestamp file to be ignored.

* The unused alias checks in visudo now handle the case of an alias
referring to another alias.