Changelog for sudo-1.7.6p2-0.23.1.i586.rpm :

* Sat May 17 2014 lijewski.stefanAATTgmail.com- fixed security issues with logic inversion when checking environment variables on the command line against the blacklist. This is only a problem when env_reset is disabled.
* CVE-2014-0106 (bnc#866503) + sudo-1.7.6p2-CVE-2014-0106.patch
* Tue Mar 05 2013 lijewski.stefanAATTgmail.com- added two security fixes:
* CVE-2013-1775 (bnc#806919) + sudo-1.7.6p2-CVE-2013-1775.patch
* CVE-2013-1776 (bnc#806921) + sudo-1.7.6p2-CVE-2013-1776.patch
* Fri Jun 01 2012 vcizekAATTsuse.com- set global ldap option before ldap init (bnc#760697)
* Fri May 18 2012 vcizekAATTsuse.com- open and close PAM session in the same process (bnc#751453)
* Wed May 16 2012 vcizekAATTsuse.com- fix for CVE-2012-2337 (bnc#762327)
* Mon Jan 02 2012 vcizekAATTsuse.cz- escape values passed to ldap_search (bnc#724490)
* Tue Dec 13 2011 vcizekAATTsuse.com- manpage claimed keeping DISPLAY environment variable (bnc#720181)
* Mon Aug 29 2011 puzelAATTsuse.com- update to sudo-1.7.6p2 (bnc#681296) - see /usr/share/doc/packages/sudo/NEWS
* Thu Jan 27 2011 cprauseAATTnovell.com- added openldap schema file (bnc#667558)
* Thu Jan 13 2011 puzelAATTnovell.com- add sudo-CVE-2011-0010.patch (bnc#663881)
* Mon Jun 28 2010 jengelhAATTmedozas.de- use %_smp_mflags
* Tue Jun 15 2010 pascal.bleserAATTopensuse.org- update to 1.7.2p7:
* portability fixes- changes from 1.7.2p6:
* Handle duplicate variables in the environment
* visudo: fix a crash when checking a sudoers file that has aliases that reference themselves
* aliases: fix use after free in error message when a duplicate alias exists
* visudo: prevent NULL dereference in printf()- removed sudo-CVE-2010-1163.patch (merged upstream)- removed sudo-CVE-2010-1646.patch (merged upstream)
* Wed Jun 02 2010 puzelAATTnovell.com- add sudo-CVE-2010-1646.patch (bnc#594738)
* Tue May 18 2010 puzelAATTnovell.com- add sudo-CVE-2010-1163.patch (bnc#594738)
* Wed Feb 24 2010 prusnakAATTsuse.cz- updated to 1.7.2p4
* Fixed the expansion of the %h escape in #include file names introduced in sudo 1.7.1.
* Fixed a a bug where the negation operator in a Cmnd_List was not being honored.
* No longer produce a parse error when #includedir references a directory that contains no valid filenames.
* The sudo.man.pl and sudoers.man.pl files are now included in the distribution for people who wish to regenerate the man pages.
* Fixed the emulation of krb5_get_init_creds_opt_alloc() for MIT kerberos.
* When authenticating via PAM, set PAM_RUSER and PAM_RHOST early so they can be used during authentication.
* Fix printing of entries with multiple host entries on a single line.
* Fix use after free when sending error messages via email.
* Use setrlimit64(), if available, instead of setrlimit() when setting AIX resource limits since rlim_t is 32bits.
* Fix size arg when realloc()ing include stack.
* Avoid a duplicate fclose() of the sudoers file.
* Fix a bug that could allow users with permission to run sudoedit to run arbitrary commands.
* Tue Jan 26 2010 jengelhAATTmedozas.de- SPARC requires large PIE model
* Mon Jul 13 2009 prusnakAATTsuse.cz- updated to 1.7.2
* A new #includedir directive is available in sudoers. This can be used to implement an /etc/sudo.d directory. Files in an includedir are not edited by visudo unless they contain a syntax error.
* The -g option did not work properly when only setting the group (and not the user). Also, in -l mode the wrong user was displayed for sudoers entries where only the group was allowed to be set.
* Fixed a problem with the alias checking in visudo which could prevent visudo from exiting.
* Sudo will now correctly parse the shell-style /etc/environment file format used by pam_env on Linux.
* When doing password and group database lookups, sudo will only cache an entry by name or by id, depending on how the entry was looked up. Previously, sudo would cache by both name and id from a single lookup, but this breaks sites that have multiple password or group database names that map to the same uid or gid.
* User and group names in sudoers may now be enclosed in double quotes to avoid having to escape special characters.
* BSM audit fixes when changing to a non-root uid.
* Experimental non-Unix group support. Currently only works with Quest Authorization Services and allows Active Directory groups fixes for Minix-3.
* For Netscape/Mozilla-derived LDAP SDKs the certificate and key paths may be specified as a directory or a file. However, version 5.0 of the SDK only appears to support using a directory (despite documentation to the contrary). If SSL client initialization fails and the certificate or key paths look like they could be default file name, strip off the last path element and try again.
* A setenv() compatibility fix for Linux systems, where a NULL value is treated the same as an empty string and the variable name is checked against the NULL pointer.
* Mon Apr 27 2009 prusnakAATTsuse.cz- updated to 1.7.1
* A new Defaults option \"pwfeedback\" will cause sudo to provide visual feedback when the user is entering a password.
* A new Defaults option \"fast_glob\" will cause sudo to use the fnmatch() function for file name globbing instead of glob(). When this option is enabled, sudo will not check the file system when expanding wildcards. This is faster but a side effect is that relative paths with wildcard will no longer work.
* The file name specified with the #include directive may now include a %h escape which is expanded to the short form of hostname.
* The -k flag may now be specified along with a command, causing the user\'s timestamp file to be ignored.
* The unused alias checks in visudo now handle the case of an alias referring to another alias.