Version 1.6.9p18 of sudo
Release Notes: A crash which occurred when the -i flag was used with a uid not in the password database has been fixed. Sudo now operates in the C locale again when doing a match against sudoers. A potential crash when a glob matches a large number of files has been fixed. A compilation problem with certain versions of Heimdal KerberosV has been fixed. When setting the umask, sudo will now use the union of the user's umask and the value set in sudoers. Sudo now stats fewer files when doing a wildcard match.
Other releases
Release Notes: This release fixes a crash in the monitor process on Solaris when NOPASSWD was specified or when authentication was disabled. It also fixes matching of a Runas_Alias in the group section of a Runas_Spec.
Release Notes: This release adds Esperanto, Italian, and Japanese translations and fixes for the following bugs: time escapes in "log_dir" were broken; IP address/netmask matching only worked for the first address in a net block; NOPASSWD was ignored for denied commands; the DEREF setting in ldap.conf was ignored; a crash in the utmp code; PAM session open/close was done as different users; SSL/TLS LDAP did not work on Debian; and the LOGNAME, USER, and USERNAME environment variables were not preserved in sudoedit mode. visudo no longer assumes all editors support the +linenumber command line argument.
Release Notes: A bug where sudo could spin in a busy loop waiting for the child process was fixed. A bug introduced in sudo 1.7.3 that prevented the -k and -K options from functioning when the tty_tickets sudoers option is enabled was fixed. Sudo no longer prints a warning when the -k or -K options are specified and the ticket file does not exist.
Release Notes: Sudoedit will now preserve the file extension in the name of the temporary file being edited. The extension is used by some editors (such as emacs) to choose the editing mode. The HOME and MAIL environment variables are now reset based on the target user's password database entry when the env_reset sudoers option is enabled. The tty_tickets option is now on by default. If PAM is in use, sudo will wait until the process has finished before closing the PAM session. "sudo -i -u user" has been fixed in cases where user has no shell listed in the password database.
Release Notes: Printing of entries with multiple host entries on a single line was fixed. A use after free when sending error messages via email was fixed. setrlimit64() is now used, if available, when setting AIX resource limits. The size arg when realloc()ing include stack was fixed. A duplicate fclose() of the sudoers file was fixed.
