sudo: sudo spits out lots of crap on STDOUT
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
sudo (Debian) |
Fix Released
|
Unknown
|
|||
sudo (Ubuntu) |
Invalid
|
High
|
Unassigned |
Bug Description
Automatically imported from Debian bug report #282786 http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #1 |
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #2 |
Message-Id: <email address hidden>
Date: Wed, 24 Nov 2004 15:11:04 +0100
From: =?iso-8859-
To: Debian Bug Tracking System <email address hidden>
Subject: sudo: sudo spits out lots of crap on STDOUT
Package: sudo
Version: 1.6.6-1.2
Severity: grave
Since today's security update for woody, sudo spits out lots of
"Looking at .." messages on stdout. This is not only extremely
annoying for me - it also makes it harder to grep through the output
of commands called via sudo, and breaks existing scripts
(numofsomething
This is what it does here:
frank@alhambra:~$ sudo /usr/sbin/runq 2>&1
Looking at PWD=/home/frank...
Looking at WRASTER_
Looking at COLORFGBG=0;15...
Looking at WINDOWID=
Looking at GRACE_EDITOR=
Looking at LC_MESSAGES=C...
Looking at LESSCLOSE=
Looking at LS_OPTIONS=
Looking at LESSOPEN=|lesspipe %s...
Looking at myoldpwd=...
Looking at GNUSTEP_
Looking at USER=frank...
Looking at LS_COLORS=
Looking at LC_TYPE=
Looking at OLDPWD=
Looking at doku=/usr/
Looking at CVS_RSH=ssh...
Looking at EDITOR=emacs...
Looking at LANG=de_DE@euro...
Looking at LC_NUMERIC=C...
Looking at COLORTERM=rxvt...
Looking at DISPLAY=:0.0...
Looking at LOGNAME=frank...
Looking at SHLVL=2...
Looking at SSH_AGENT_
Looking at TEXINPUTS=
Looking at MM_CHARSET=
Looking at SHELL=/bin/bash...
Looking at CVSROOT=
Looking at HOME=/home/frank...
Looking at TERM=rxvt...
Looking at PATH=/usr/
Looking at WMAKER_
Looking at _=/usr/bin/sudo...
-- System Information
Debian Release: 3.0-bunk-2
Architecture: i386
Kernel: Linux alhambra 2.4.27 #1 Sam Sep 25 11:29:41 CEST 2004 i686
Locale: LANG=de_DE@euro, LC_CTYPE=de_DE@euro
Versions of packages sudo depends on:
ii libc6 2.2.5-11.5 GNU C Library: Shared libraries an
ii libpam-modules 0.72-35 Pluggable Authentication Modules f
ii libpam0g 0.76-14.99.jones.1 Pluggable Authentication Modules l
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Daniel Stone (daniels) wrote : | #3 |
Not present in the Ubuntu security update.
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#4 |
Dear Security team,
this bug report should have a Cc to you in the first place, excuse me
Bdale.
Frank Küster <email address hidden> wrote:
> Package: sudo
> Version: 1.6.6-1.2
> Severity: grave
>
> Since today's security update for woody, sudo spits out lots of
> "Looking at .." messages on stdout. This is not only extremely
> annoying for me - it also makes it harder to grep through the output
> of commands called via sudo, and breaks existing scripts
> (numofsomething
>
> This is what it does here:
[...]
There are two other bugs on that which I didn't see before submitting
(#282777, #282778); I am not merging because these are "important", but
I think it should continue to be "grave" - it breaks existing local
scripts.
Regards, Frank
--
Frank Küster
Inst. f. Biochemie der Univ. Zürich
Debian Developer
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#5 |
tags 282777 +grave +pending +security -important
tags 282778 +grave +pending +security -important
tags 282786 +grave +pending +security -important
merge 282777 282778 282786
stop
Steve
--
# The Debian Security Audit Project.
http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#6 |
On Wed, Nov 24, 2004 at 04:53:01PM +0100, Frank K?ster wrote:
> > Since today's security update for woody, sudo spits out lots of
> > "Looking at .." messages on stdout. This is not only extremely
> > annoying for me - it also makes it harder to grep through the output
> > of commands called via sudo, and breaks existing scripts
> > (numofsomething
> >
> > This is what it does here:
> [...]
>
> There are two other bugs on that which I didn't see before submitting
> (#282777, #282778); I am not merging because these are "important", but
> I think it should continue to be "grave" - it breaks existing local
> scripts.
I've merged them all, and set the 'pending' tag. A new upload will
be made shortly to correct this problem.
Steve
--
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#7 |
Frank Küster wrote:
> Dear Security team,
>
> this bug report should have a Cc to you in the first place, excuse me
> Bdale.
>
> Frank Küster <email address hidden> wrote:
>
> > Package: sudo
> > Version: 1.6.6-1.2
> > Severity: grave
> >
> > Since today's security update for woody, sudo spits out lots of
> > "Looking at .." messages on stdout. This is not only extremely
> > annoying for me - it also makes it harder to grep through the output
> > of commands called via sudo, and breaks existing scripts
> > (numofsomething
> >
> > This is what it does here:
> [...]
>
> There are two other bugs on that which I didn't see before submitting
> (#282777, #282778); I am not merging because these are "important", but
> I think it should continue to be "grave" - it breaks existing local
> scripts.
Nah, it just spits too much output. It doesn't break.
Waiting only for mips and s390...
Regards,
Joey
--
WARNING: Do not execute! This call violates patent DE10108564.
http://
wget -O patinfo-`date +"%Y%m%d"`.html http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#8 |
tags 282777 + pending security important
tags 282778 + pending security important
tags 282786 + pending security important
tags 282786 - grave
merge 282777 282778 282786
end
--
Steve
--
# The Debian Security Audit Project.
http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#9 |
Martin Schulze <email address hidden> wrote:
>>
>> There are two other bugs on that which I didn't see before submitting
>> (#282777, #282778); I am not merging because these are "important", but
>> I think it should continue to be "grave" - it breaks existing local
>> scripts.
>
> Nah, it just spits too much output. It doesn't break.
It doesn't break itself, but it will surely break scripts that rely on
the traditional behavior of sudo and parse the output of commands called
via sudo.
> Waiting only for mips and s390...
You mean, you are compiling a fixed sudo version?
Regards, Frank
--
Frank Küster
Inst. f. Biochemie der Univ. Zürich
Debian Developer
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #10 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 16:53:01 +0100
From: <email address hidden> (=?iso-
To: <email address hidden>
Cc: <email address hidden>
Subject: Re: sudo: sudo spits out lots of crap on STDOUT
Dear Security team,
this bug report should have a Cc to you in the first place, excuse me
Bdale.=20
Frank K=FCster <email address hidden> wrote:
> Package: sudo
> Version: 1.6.6-1.2
> Severity: grave
>
> Since today's security update for woody, sudo spits out lots of
> "Looking at .." messages on stdout. This is not only extremely
> annoying for me - it also makes it harder to grep through the output
> of commands called via sudo, and breaks existing scripts
> (numofsomething
>
> This is what it does here:
[...]
There are two other bugs on that which I didn't see before submitting
(#282777, #282778); I am not merging because these are "important", but
I think it should continue to be "grave" - it breaks existing local
scripts.=20
Regards, Frank
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#11 |
Frank Küster wrote:
> > Waiting only for mips and s390...
>
> You mean, you are compiling a fixed sudo version?
Yes, built the last two packages on my own due to er... busy buildds.
Update in 5 minutes.
Regards,
Joey
--
WARNING: Do not execute! This call violates patent DE10108564.
http://
wget -O patinfo-`date +"%Y%m%d"`.html http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#12 |
tags 282777 + pending security
tags 282778 + pending security
tags 282786 + pending security
severity 282777 important
severity 282778 important
severity 282786 important
merge 282777 282778 282786
stop
end
Grr I will get this right. Take three.
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #13 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 16:17:11 +0000
From: Steve Kemp <email address hidden>
To: Frank K?ster <email address hidden>
Cc: <email address hidden>, <email address hidden>
Subject: Re: sudo: sudo spits out lots of crap on STDOUT
On Wed, Nov 24, 2004 at 04:53:01PM +0100, Frank K?ster wrote:
> > Since today's security update for woody, sudo spits out lots of
> > "Looking at .." messages on stdout. This is not only extremely
> > annoying for me - it also makes it harder to grep through the output
> > of commands called via sudo, and breaks existing scripts
> > (numofsomething
> >
> > This is what it does here:
> [...]
>
> There are two other bugs on that which I didn't see before submitting
> (#282777, #282778); I am not merging because these are "important", but
> I think it should continue to be "grave" - it breaks existing local
> scripts.
I've merged them all, and set the 'pending' tag. A new upload will
be made shortly to correct this problem.
Steve
--
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #14 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 17:22:13 +0100
From: Martin Schulze <email address hidden>
To: Frank =?iso-8859-
Cc: <email address hidden>, <email address hidden>
Subject: Re: sudo: sudo spits out lots of crap on STDOUT
Frank K=FCster wrote:
> Dear Security team,
>=20
> this bug report should have a Cc to you in the first place, excuse me
> Bdale.=20
>=20
> Frank K=FCster <email address hidden> wrote:
>=20
> > Package: sudo
> > Version: 1.6.6-1.2
> > Severity: grave
> >
> > Since today's security update for woody, sudo spits out lots of
> > "Looking at .." messages on stdout. This is not only extremely
> > annoying for me - it also makes it harder to grep through the output
> > of commands called via sudo, and breaks existing scripts
> > (numofsomething
> >
> > This is what it does here:
> [...]
>=20
> There are two other bugs on that which I didn't see before submitting
> (#282777, #282778); I am not merging because these are "important", but
> I think it should continue to be "grave" - it breaks existing local
> scripts.=20
Nah, it just spits too much output. It doesn't break.
Waiting only for mips and s390...
Regards,
Joey
--=20
WARNING: Do not execute! This call violates patent DE10108564.
http://
wget -O patinfo-`date +"%Y%m%d"`.html http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #15 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 16:16:36 +0000
From: Steve Kemp <email address hidden>
To: <email address hidden>
tags 282777 +grave +pending +security -important
tags 282778 +grave +pending +security -important
tags 282786 +grave +pending +security -important
merge 282777 282778 282786
stop
Steve
--
# The Debian Security Audit Project.
http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #16 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 17:35:59 +0100
From: <email address hidden> (=?iso-
To: Martin Schulze <email address hidden>
Cc: <email address hidden>, <email address hidden>
Subject: Re: sudo: sudo spits out lots of crap on STDOUT
Martin Schulze <email address hidden> wrote:
>>=20
>> There are two other bugs on that which I didn't see before submitting
>> (#282777, #282778); I am not merging because these are "important", but
>> I think it should continue to be "grave" - it breaks existing local
>> scripts.=20
>
> Nah, it just spits too much output. It doesn't break.
It doesn't break itself, but it will surely break scripts that rely on
the traditional behavior of sudo and parse the output of commands called
via sudo.
> Waiting only for mips and s390...
You mean, you are compiling a fixed sudo version?
Regards, Frank
--=20
Frank K=FCster
Inst. f. Biochemie der Univ. Z=FCrich
Debian Developer
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #17 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 16:37:18 +0000
From: Steve Kemp <email address hidden>
To: <email address hidden>
tags 282777 + pending security important
tags 282778 + pending security important
tags 282786 + pending security important
tags 282786 - grave
merge 282777 282778 282786
end
--
Steve
--
# The Debian Security Audit Project.
http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #18 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 17:55:48 +0100
From: Martin Schulze <email address hidden>
To: Frank =?iso-8859-
Cc: <email address hidden>, <email address hidden>
Subject: Re: sudo: sudo spits out lots of crap on STDOUT
Frank K=FCster wrote:
> > Waiting only for mips and s390...
>=20
> You mean, you are compiling a fixed sudo version?
Yes, built the last two packages on my own due to er... busy buildds.
Update in 5 minutes.
Regards,
Joey
--=20
WARNING: Do not execute! This call violates patent DE10108564.
http://
wget -O patinfo-`date +"%Y%m%d"`.html http://
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #19 |
Message-ID: <email address hidden>
Date: Wed, 24 Nov 2004 16:57:16 +0000
From: Steve Kemp <email address hidden>
To: <email address hidden>
tags 282777 + pending security
tags 282778 + pending security
tags 282786 + pending security
severity 282777 important
severity 282778 important
severity 282786 important
merge 282777 282778 282786
stop
end
Grr I will get this right. Take three.
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#20 |
Martin Schulze <email address hidden> writes:
> Yes, built the last two packages on my own due to er... busy buildds.
> Update in 5 minutes.
Thanks for following up on this.
Bdale
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #21 |
Message-ID: <email address hidden>
Date: Sat, 27 Nov 2004 16:15:45 -0700
From: Bdale Garbee <email address hidden>
To: Martin Schulze <email address hidden>
Cc: <email address hidden>
Subject: Re: Bug#282786: sudo: sudo spits out lots of crap on STDOUT
Martin Schulze <email address hidden> writes:
> Yes, built the last two packages on my own due to er... busy buildds.
> Update in 5 minutes.
Thanks for following up on this.
Bdale
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
|
#22 |
I believe these were fixed by the upload of 1.6.6-1.3 which is now in stable.
Bdale
![](/+icing/build/overlay/assets/skins/sam/images/close.gif)
Debian Bug Importer (debzilla) wrote : | #23 |
Message-Id: <email address hidden>
Date: Sat, 26 Mar 2005 21:29:05 -0700 (MST)
From: <email address hidden> (Bdale Garbee)
To: <email address hidden>, <email address hidden>,
<email address hidden>
Subject: fixed
I believe these were fixed by the upload of 1.6.6-1.3 which is now in stable.
Bdale
Changed in sudo: | |
status: | Unknown → Fix Released |
Automatically imported from Debian bug report #282786 http:// bugs.debian. org/282786