openSUSE Recommended Update: sudo: Update to version 1.8.10p3 ______________________________________________________________________________ Announcement ID: openSUSE-RU-2014:1273-1 Rating: moderate References: #897888 Affected Products: openSUSE 13.1 ______________________________________________________________________________ An update that has one recommended fix can now be installed. Description: This update fixes the following issues with sudo: - update to 1.8.10p3 + bnc#897888: fixes a logging/sudoreplay issue + Fixed expansion of the %p escape in the prompt for "sudo -l" when rootpw, runaspw or targetpw is set. + Fixed matching of uids and gids which was broken in version 1.8.9 + PAM credential initialization has been re-enabled. It was unintentionally disabled by default in version 1.8.8. The way credentials are initialized has also been fixed. + Fixed a descriptor leak on Linux when determing boot time. Sudo normally closes extra descriptors before running a command so the impact is limited. + Fixed flushing of the last buffer of data when I/O logging is enabled. This bug, introduced in version 1.8.9, could cause incomplete command output on some systems. + Fixed a hang introduced in sudo 1.8.10 when timestamp_timeout is set to zero. Patch Instructions: To install this openSUSE Recommended Update use YaST online_update. Alternatively you can run the command listed for your product: - openSUSE 13.1: zypper in -t patch openSUSE-2014-577 To bring your system up-to-date, use "zypper patch". Package List: - openSUSE 13.1 (i586 x86_64): sudo-1.8.10p3-5.9.1 sudo-debuginfo-1.8.10p3-5.9.1 sudo-debugsource-1.8.10p3-5.9.1 sudo-devel-1.8.10p3-5.9.1 References: https://bugzilla.suse.com/show_bug.cgi?id=897888