From ijackson at chiark.greenend.org.uk  Mon Jun  1 20:45:53 2026
From: ijackson at chiark.greenend.org.uk (Ian Jackson)
Date: Mon, 1 Jun 2026 20:45:53 +0100
Subject: userv 1.2.3
Message-ID: <27165.57713.977076.566516@chiark.greenend.org.uk>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I am pleased to (belatedly) announce the release of userv 1.2.3.

userv (pronounced you-serve) is a program which, according to the
specification, is

   a Unix system facility to allow one program to invoke another when
   only limited trust exists between them.

Its slogan is:
  _Put the security boundary where it ought to be._

It is a tool for system administrators, who often find themselves with
a program running as one user which needs to be able to do certain
things as another user.

It is also a component for application authors who wish to do what is
now known as `privsep', using a process call interface.

For more information about userv, please see:
  http://www.chiark.greenend.org.uk/~ian/userv/


This is the first release I've formally announced here for some time.
My apologies for that oversight.  The changes since the last version I
announced here were all released to Debian, and are almost entirely
inconsequential build fixes and minor documentation improvements.

There is one bugfix since 1.2.0:

  * Do not leak a harmless fd into the service program.


userv source code can be obtained from my git servers:
  https://www.chiark.greenend.org.uk/ucgi/~ian/git/userv.git/
  https://salsa.debian.org/iwj/userv
Please use the userv-1.2.3 signed git tag, on commitid
  e597a01e7f5dca4ed14d9a214211f3354f601fbd

Alternatively, a tarball and detached signature is available here:
  http://www.chiark.greenend.org.uk/~ian/userv//ftp/
259431d0033efa109d21ceec818e119c10342cb23e16185c6bd76c035ec646db  userv-1.2.3.tar.gz
befb45c0969c39fe909e664a1047fc40fd4eaabafd62d71f037474e10699ec76  userv-1.2.3.tar.gz.sig


For a full list of changes, consult the changelog:
  https://www.chiark.greenend.org.uk/ucgi/~ian/git?p=userv.git;a=blob;f=debian/changelog;h=2a9662522d99e04d2b40609da684ac3b18ff1d52;hb=e597a01e7f5dca4ed14d9a214211f3354f601fbd

-----BEGIN PGP SIGNATURE-----
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=TqIt
-----END PGP SIGNATURE-----


-- 
Ian Jackson <ijackson at chiark.greenend.org.uk>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.


From ijackson at chiark.greenend.org.uk  Mon Jun  1 20:47:44 2026
From: ijackson at chiark.greenend.org.uk (Ian Jackson)
Date: Mon, 1 Jun 2026 20:47:44 +0100
Subject: userv 1.2.3
Message-ID: <27165.57824.460979.884915@chiark.greenend.org.uk>

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

I am pleased to (belatedly) announce the release of userv 1.2.3.

userv (pronounced you-serve) is a program which, according to the
specification, is

   a Unix system facility to allow one program to invoke another when
   only limited trust exists between them.

Its slogan is:
  _Put the security boundary where it ought to be._

It is a tool for system administrators, who often find themselves with
a program running as one user which needs to be able to do certain
things as another user.

It is also a component for application authors who wish to do what is
now known as `privsep', using a process call interface.

For more information about userv, please see:
  http://www.chiark.greenend.org.uk/~ian/userv/


This is the first release I've formally announced here for some time.
My apologies for that oversight.  The changes since the last version I
announced here were all released to Debian, and are almost entirely
inconsequential build fixes and minor documentation improvements.

There is one bugfix since 1.2.0:

  * Do not leak a harmless fd into the service program.


userv source code can be obtained from my git servers:
  https://www.chiark.greenend.org.uk/ucgi/~ian/git/userv.git/
  https://salsa.debian.org/iwj/userv
Please use the userv-1.2.3 signed git tag, on commitid
  e597a01e7f5dca4ed14d9a214211f3354f601fbd

Alternatively, a tarball and detached signature is available here:
  http://www.chiark.greenend.org.uk/~ian/userv//ftp/
259431d0033efa109d21ceec818e119c10342cb23e16185c6bd76c035ec646db  userv-1.2.3.tar.gz
befb45c0969c39fe909e664a1047fc40fd4eaabafd62d71f037474e10699ec76  userv-1.2.3.tar.gz.sig


For a full list of changes, consult the changelog:
  https://www.chiark.greenend.org.uk/ucgi/~ian/git?p=userv.git;a=blob;f=debian/changelog;h=2a9662522d99e04d2b40609da684ac3b18ff1d52;hb=e597a01e7f5dca4ed14d9a214211f3354f601fbd

-----BEGIN PGP SIGNATURE-----

iQJUBAEBCgA+FiEEQWOBFNEyiDslog3dR1FXV9gAJFYFAmod4V0gHGlqYWNrc29u
QGNoaWFyay5ncmVlbmVuZC5vcmcudWsACgkQR1FXV9gAJFYKHQ//ZrCZHJFLX+vv
UtPQEsc+Pea4sKH+/qSIkU4TFNEe9vlwScvgnRHYq+V1gn2+SlUZpk80icUZeF79
VtJtSq5iUlR8Z+qKhLEVyBWQ8jHWV+S6ga5MHPhrhK9KquCFzPKu5m6hleeK1Lg9
Ovuwx+iPqzCSW8MHBU+IzkUHm5LZvd5wu1xdM0NXYt8n8HzmvLLvGkE2MVjOQlHZ
pS6tzYkOxtGHi9+KAHb8QZnvdJygsACO+dKPFihRjSVw/4OHISs61dRgULfV7+1v
EKDNsxXZrN6YlfIXEr7rqt2FXdEuAW602rEpWzENLHM4ylCXH57x/g6NClEKoLDa
MfS4NzQGshPVF2vFIVG+C8HOWswZ240I3qNQ6iDrn/jZlPPoRuQw94vIYfmW085R
qRHrtdo3Erh/xLMkhcakF7PvMxsiqG7wsKKN8EihCrnNJYn2sLsHVzTI7vSKKcOB
lZrYLhKS4bAj+I0fVwz8IhmnUuMI9YH+QHe6NWGdYubQ4laWHVwr2Aa5V/oBt5RI
GBp/i9VECTCdhafMnh7le3zKaxodHwd8RyDVf1tgOS1/ptX6Lkbxw7dsaPkncwwA
jeYWpJ7CRmnUXq42VQ2ti0EmLZ2/1cdCay2BY6QFSynwnWdE4fmT+rWXDTfYsNl8
1mzDLMayICRZ2Cns3aO2ikK8ZKTrIx0=
=TqIt
-----END PGP SIGNATURE-----

-- 
Ian Jackson <ijackson at chiark.greenend.org.uk>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.