sudo (1.9.17p2-7ubuntu1) stonking; urgency=medium

  * Merge with Debian unstable (LP: #2153358). Remaining changes:
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/sudoers:
       + also grant admin group sudo access
       + include /snap/bin in the secure_path
    - debian/tests/04-getroot-sssd:
    - Check if the slapd daemon is ready before proceeding.
      + In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP#2026888
    - set alternatives (LP #2111419)
    - remove sudo-ldap package (LP #2115781)
      + Whereas Debian introduced a transitional for this package,
        we remove it outright.

 -- Mitchell Augustin <mitchell.augustin@canonical.com>  Fri, 05 Jun 2026 16:28:18 -0500

sudo (1.9.17p2-7) unstable; urgency=medium

  * new unchanged source upload to trigger build with new
    debhelper which is needed for full DPKG_ROOT support

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 08 Jun 2026 09:32:46 +0200

sudo (1.9.17p2-6) unstable; urgency=medium

  [ Marc Haber ]
  * add CVE number to 1.9.17p2-5 changelog
  * Fix test suite caching tests.
  * add pam_env.so invocation to pam files.
  * align /etc/sudoers with what upstream ships.

  [ Johannes Schauer Marin Rodrigues ]
  * debian/sudo.postinst: support DPKG_ROOT

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 01 Jun 2026 06:44:55 +0200

sudo (1.9.17p2-5) unstable; urgency=medium

  * cherry-pick upstream exec_mailer-Set-group-as-well-as-uid.
    This is the upstream fix for CVE-2026-35535:
    https://github.com/sudo-project/sudo/commit/3e474c2
  * Build-Depend on libselinux-dev instead of libselinux1-dev

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sat, 28 Mar 2026 13:11:59 +0100

sudo (1.9.17p2-4) unstable; urgency=medium

  * some improvements to the test suite, making it more suitable
    for older Debian releases
  * remove sudo.preinst (historic)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Tue, 10 Feb 2026 21:29:33 +0100

sudo (1.9.17p2-3) unstable; urgency=medium

  * use dh_maintscript to remove /etc/sudoers.d/README.
    Thanks to Sven Joachim (Closes: #1126614)
  * comment mail_badpass in default /etc/sudoers.
    Thanks to Sven Geggus (Closes: #1114986)
  * remove no longer used debconf templates (Closes: #1101123)
  * remove po-debconf dependency

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sat, 31 Jan 2026 21:32:35 +0100

sudo (1.9.17p2-2) unstable; urgency=medium

  * upload to unstable
  * declare proper breaks/replacest
  * add upstream patch (and test case): Do not perform path expansion
    Thanks to Adam D. Barratt (Closes: #1126085)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 28 Jan 2026 22:12:32 +0100

sudo (1.9.17p2-1ubuntu3) resolute; urgency=medium

  * SECURITY UPDATE: exec_mailer gid issue (LP: #2143042)
    - debian/patches/lp2143042.patch: set group as well as uid when running
      the mailer and make a setuid(), setgid() or setgroups() failure fatal
      in include/sudo_eventlog.h, lib/eventlog/eventlog.c,
      lib/eventlog/eventlog_conf.c, plugins/sudoers/logging.c,
      plugins/sudoers/policy.c.
    - No CVE number

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Fri, 13 Mar 2026 07:02:48 -0400

sudo (1.9.17p2-1ubuntu2) resolute; urgency=medium

  * Remove debian/etc/ and add sudo-common as dependency (LP: #2113927)

 -- Simon Johnsson <simon.johnsson@canonical.com>  Fri, 17 Oct 2025 16:18:39 +0200

sudo (1.9.17p2-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2125486). Remaining changes:
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
      In some situations, the next command (ldapmodify) runs before
      the service is ready. See LP#2026888
    - set alternatives (LP #2111419)
    - remove sudo-ldap package (LP #2115781)
  * Drop Changes:
    - patches merges upstream CVE-2025-32463, CVE-2025-32462
    - man/man8/sudo_root.8, no longer required

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Thu, 25 Sep 2025 14:47:20 +0200

sudo (1.9.17p2-1exp1) experimental; urgency=medium

  [ Marc Haber ]
  * remove sudo-ldap.maintscript
  * remove sudo-ldap and libnss-sudo

  [ Alexander Reichle-Schmehl ]
  * Add myself to uploaders

  [ Daniel Lewart ]
  * Move /etc/sudoers.d/README to top of README.Debian (Closes: #1108772)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 31 Dec 2025 08:37:25 +0100

sudo (1.9.17p2-1) unstable; urgency=medium

  [ Otto Kekäläinen ]
  * New upstream release

  [ Marc Haber ]
  * add debian/upstream/metadata.
    Thanks to Otto Kekäläinen
  * add debian/gbp.conf (to reflect new repo structure)
    Thanks to Otto Kekäläinen
  * split Build-Depends to Build-Depends-Arch
  * run wrap-and-sort

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sun, 17 Aug 2025 12:41:14 +0200

sudo (1.9.17p1-1) experimental; urgency=medium

  * New upstream version 1.9.17p1
    * this includes the upstream fixes for
      CVE-2025-32462 and CVE-2025-32463.
  * Add new italian debconf translation.
    Thanks to Ceppo (Closes: #1108208)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Tue, 01 Jul 2025 06:15:43 +0200

sudo (1.9.16p2-3ubuntu2) questing; urgency=medium

  * add sudoers man to alternatives (LP: #2121037)
  * use sudo.ws for debian/tests

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 20 Aug 2025 11:35:49 +0200

sudo (1.9.16p2-3ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2119135). Remaining changes:
    - debian/sudo[-ldap].manpages: install man/man8/sudo_root.8
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
        In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP#2026888
    - set alternatives (LP #2111419)
    - remove sudo-ldap package (LP #2115781)

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 30 Jul 2025 23:49:17 +0200

sudo (1.9.16p2-3) unstable; urgency=high

  * backport upstream patch for CVE-2025-32463
  * add upstream patch for CVE-2025-32462
  * Add new italian debconf translation.
    Thanks to Ceppo (Closes: #1108208)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 30 Jun 2025 07:55:33 +0200

sudo (1.9.16p2-2) unstable; urgency=medium

  * new European Portuguese translation of debconf messages.
    Thanks to Américo Monteiro (Closes: #1101892)
  * add new Romanian debconf translation.
    Thanks to Remus-Gabriel Chelu (Closes: #1102040)
  * Build-Depend on tzdata.
    Thanks to Chris Hofstaedtler and other Mini Debconf Hamburg people
    (Closes: #1104681)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sun, 04 May 2025 17:48:51 +0200

sudo (1.9.16p2-1ubuntu4) questing; urgency=medium

  * remove sudo-ldap package (LP: #2115781)

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 02 Jul 2025 11:41:28 +0200

sudo (1.9.16p2-1ubuntu3) questing; urgency=medium

  * fix autopackage test (LP: #2115183)
    - rename cvtsudoers to cvtsudoers.ws

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Wed, 25 Jun 2025 11:22:35 +0200

sudo (1.9.16p2-1ubuntu2) questing; urgency=medium

  * set alternatives (LP: #2111419)
    - rename sudo to sudo.ws (ubuntu suffix based on upstream
      https://www.sudo.ws/).
    - adds a patch d/p/sudo-rename-for-alternates.patch to symlink
      sudoedit to new name.
    - add d/sudo.alternatives
    - rename sudo and dependent binaries and manpages in
      override_dh_auto_install
    - recommends: sudo-rs for installation on upgrades
    - update lintian overrides for new name
    - remove old reference to /etc/alternatives/sudo in d/sudo.postinst 

 -- Ravi Kant Sharma <ravi.kant.sharma@canonical.com>  Mon, 12 May 2025 16:01:09 +0200

sudo (1.9.16p2-1ubuntu1) plucky; urgency=medium

  * Merge with Debian unstable (LP: #2098855). Remaining changes:
    - debian/sudo[-ldap].manpages: install man/man8/sudo_root.8
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/control: 03-getroot-ldap
      + allow removal of 'sudo' in autopkgtest (SUDO_FORCE_REMOVE=yes)
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
        In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP: #2026888
  * Drop Changes:
    - Disable an offensive insult (LP: #2058053)
      + d/p/disable_offensive_insult.patch: properly disable an offensive
        insult that was fogotten when the configure options were refactored
        in plugins/sudoers/ins_csops.h.
      [Disabled by default with 1.9.16]

 -- Dominik Viererbe <dominik.viererbe@canonical.com>  Wed, 19 Feb 2025 16:30:12 +0200

sudo (1.9.16p2-1) unstable; urgency=medium

  * New upstream version 1.9.16p2

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sun, 09 Feb 2025 20:13:12 +0100

sudo (1.9.16p1-1) unstable; urgency=medium

  * New upstream version 1.9.16p1

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 13 Nov 2024 18:08:56 +0100

sudo (1.9.16-2) unstable; urgency=medium

  * Upload to unstable

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 23 Sep 2024 08:14:18 +0200

sudo (1.9.16-1) experimental; urgency=medium

  * New upstream version 1.9.16
  * update debian/copyright
  * Streamline po-debconf translations headers
  * Add debconf translations for Simplified and Traditional Chinese.
    Thanks to Yangfl
  * Update Brazilian Portuguese debconf translation.
    Thanks to Adriano Rafael Gomes (Closes: #1068109)
  * add patch to fix docs to correctly point to ssh-askpass
  * remove obsolete lintian tag from overrides
  * Standards-Version: 4.7.0 (no changes necessary)
  * fix proper file suffixes for patches
  * disable libapparmor-dev build dependency for non-linux arches.
    Thanks to Sambuel Thibault (Closes: #1079659)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sun, 22 Sep 2024 21:19:01 +0200

sudo (1.9.15p5-3ubuntu5) noble; urgency=high

  * No change rebuild against libssl3t64.

 -- Julian Andres Klode <juliank@ubuntu.com>  Mon, 08 Apr 2024 16:50:39 +0200

sudo (1.9.15p5-3ubuntu4) noble; urgency=medium

  * No-change rebuild for CVE-2024-3094

 -- Steve Langasek <steve.langasek@ubuntu.com>  Sun, 31 Mar 2024 17:17:28 +0000

sudo (1.9.15p5-3ubuntu3) noble; urgency=medium

  * Disable an offensive insult (LP: #2058053)
    - d/p/disable_offensive_insult.patch: properly disable an offensive
      insult that was fogotten when the configure options were refactored
      in plugins/sudoers/ins_csops.h.

 -- Marc Deslauriers <marc.deslauriers@ubuntu.com>  Mon, 18 Mar 2024 07:53:26 -0400

sudo (1.9.15p5-3ubuntu2) noble; urgency=medium

  * No-change rebuild against libssl3t64

 -- Steve Langasek <steve.langasek@ubuntu.com>  Mon, 04 Mar 2024 21:28:45 +0000

sudo (1.9.15p5-3ubuntu1) noble; urgency=medium

  * Merge with Debian unstable (LP: #2051576). Remaining changes:
    - debian/sudo[-ldap].manpages: install man/man8/sudo_root.8
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/control: 03-getroot-ldap
      + allow removal of 'sudo' in autopkgtest (SUDO_FORCE_REMOVE=yes)
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
        In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP#2026888

 -- Danilo Egea Gondolfo <danilo.egea.gondolfo@canonical.com>  Mon, 29 Jan 2024 17:09:56 +0000

sudo (1.9.15p5-3) unstable; urgency=medium

  * add --with-devel configure option.
    Thanks to Bastien Roucariès (Closes: #1061272)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Fri, 26 Jan 2024 21:10:13 +0100

sudo (1.9.15p5-2) unstable; urgency=medium

  * switch Build-Depends from systemd to systemd-dev
    Thanks to Michael Biebl (Closes: #1060511)
  * set Multi-Arch: foreign on sudo and sudo-ldap.
    Thanks to Andreas Rottmann (Closes: #1060445)
  * add debian/copyright clause for source_sudo.py.
    Oops.

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Sat, 13 Jan 2024 21:59:56 +0100

sudo (1.9.15p5-1) unstable; urgency=medium

  * new upstream version 1.9.15p5
    * This is supposed to properly malloc on hurd.
      Thanks to Martin-Éric Racine (Closes: #1057833)
  * add durch debconf translation.
    Thanks to Frans Spiesschaert (Closes: #1059567)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 03 Jan 2024 21:40:38 +0100

sudo (1.9.15p4-2) unstable; urgency=medium

  * upload to unstable
  * use pkg-config to place systemd units.
    Thanks to Chris Hofstaedtler (Closes: #1059063)
  * Add french debconf translation.
    Thanks to bubu (Closes: #1058939)
  * fix typo in NEWS.Debian.
    Thanks to Vincent Danjean (Closes: #1058925)
  * add persian debconf translation.
    Thanks to Danial Behzadi
  * add spanish debconf translation.
    Thanks to Camaleón (Closes: #1059460)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 27 Dec 2023 17:53:13 +0100

sudo (1.9.15p4-1) experimental; urgency=medium

  * new upstream version 1.9.15p4
  * add de.po template translation.
    Thanks to Christoph Brinkhaus (Closes: #1058762)
  * Enable AppArmor (MR 15, manually apṕlied)
    Thanks to Will Shand
  * remove legacy debian/rules.predh7

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Fri, 15 Dec 2023 22:57:27 +0100

sudo (1.9.15p3-1) unstable; urgency=medium

  * new upstream version 1.9.15p3

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Thu, 14 Dec 2023 20:22:51 +0100

sudo (1.9.15p2-2) unstable; urgency=medium

  * upload to unstable

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Fri, 08 Dec 2023 18:31:14 +0100

sudo (1.9.15p2-1) experimental; urgency=medium

  * the #DENOG15 release
  * New upstream version 1.9.15p2
  * mark sudo-ldap as deprecated.

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 20 Nov 2023 14:15:22 +0100

sudo (1.9.14p2-1ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2030914). Remaining changes:
    - debian/sudo[-ldap].manpages: install man/man8/sudo_root.8
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/control: 03-getroot-ldap
      + allow removal of 'sudo' in autopkgtest (SUDO_FORCE_REMOVE=yes)
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
        In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP#2026888

 -- Danilo Egea Gondolfo <danilo.egea.gondolfo@canonical.com>  Wed, 09 Aug 2023 21:53:59 +0100

sudo (1.9.14p2-1) unstable; urgency=medium

  * new upstream version

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Thu, 20 Jul 2023 00:31:52 +0200

sudo (1.9.13p3-3ubuntu1) mantic; urgency=medium

  * Merge with Debian unstable (LP: #2025655). Remaining changes:
    - debian/sudo[-ldap].manpages: install man/man8/sudo_root.8
    - debian/sudo[-ldap].init: delete init scripts, as they are no longer
      necessary.
    - debian/etc/pam.d/sudo[-i]:
      + Use pam_env to read /etc/environment and /etc/default/locale
        environment files. Reading ~/.pam_environment is not permitted due
        to security reasons.
    - debian/etc/sudoers:
      + also grant admin group sudo access
      + include /snap/bin in the secure_path
    - debian/tests/control: 03-getroot-ldap:
      + allow removal of 'sudo' in autopkgtest (SUDO_FORCE_REMOVE=yes)
  * Added changes:
    - debian/tests/04-getroot-sssd:
      + Check if the slapd daemon is ready before proceeding.
        In some situations, the next command (ldapmodify) runs before
        the service is ready. See LP:#2026888
  * Dropped changes:
    - Drop Build-Conflicts on fakeroot (<< 1.25.3-1.1ubuntu1)
      This wasn't in the former Ubuntu version, just mentioned
      in the changelog by accident

 -- Danilo Egea Gondolfo <danilo.egea.gondolfo@canonical.com>  Mon, 03 Jul 2023 15:23:30 +0100

sudo (1.9.13p3-3) unstable; urgency=medium

  * fix wrong patch to fix event log format
    (added wrongly in 1.9.13p3-2)

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Tue, 27 Jun 2023 11:43:07 +0200

sudo (1.9.13p3-2) unstable; urgency=medium

  * add upstream patch to fix event log format.
    Thanks to Kimmo Suominen (Closes: #1039557)
  * add patch to improve upstream spanish translation

 -- Marc Haber <mh+debian-packages@zugschlus.de>  Tue, 27 Jun 2023 11:09:16 +0200

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog sudo`.
