Debian Patches
Status for sudo/1.9.16p2-3+deb13u5
| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0008-open_sudoers-Do-not-perform-path-expansion-on-files-.patch | open_sudoers: Do not perform path expansion on files in an includedir A file in an includedir containing one or more colons (':') in the name we was being expanded as a colon-separated path instead of being opened as-is. This fixes a regression introduced in sudo 1.9.14. Bug #1085 |
"Todd C. Miller" <Todd.Miller@sudo.ws> | no | 2026-01-24 | ||
| amd64-ibt.diff | Enable Intel CET on amd64 only | Marcos Del Sol Vives <marcos@orca.pet> | no | 2025-09-02 | ||
| 0006-exec_mailer-Set-group-as-well-as-uid-when-running-th.patch | exec_mailer: Set group as well as uid when running the mailer Also make a setuid(), setgid() or setgroups() failure fatal. Found by the ZeroPath AI Security Engineer <https://zeropath.com> |
"Todd C. Miller" <Todd.Miller@sudo.ws> | no | 2025-11-08 | ||
| 0011-sudo-ignore-user-specified-TZ-environment-variable.patch | sudo: ignore user-specified TZ environment variable This avoids potential issues caused by a user-specified timezone when running sudo, such as the parsing of NOTBEFORE/NOTAFTER values in sudoers. The TZ variable is still passed to the command being run unless blocked by sudoers rules. Credit: - XlabAI Team of Tencent Xuanwu Lab (xlabai@tencent.com) - Atuin Automated Vulnerability Discovery Engine - Guannan Wang, Zhanpeng Liu, Guancheng Li |
"Todd C. Miller" <Todd.Miller@sudo.ws> | no | 2026-03-14 | ||
| 0012-Remove-TZ-from-sudo-s-working-environment-without-mo.patch | Remove TZ from sudo's working environment without modifying envp. The earlier change to prevent NOTBEFORE/NOTAFTER in sudoers from being affected by a user-specified timezone was not effective since the mktime() function re-reads the TZ environment variable each time it is called. Reported by Ermenson Junior |
"Todd C. Miller" <Todd.Miller@sudo.ws> | no | 2026-08-28 | ||
| 0013-Copy-envp-submit_envp-instead-of-replacing-the-envir.patch | Copy envp -> submit_envp instead of replacing the environ pointer. This has the same effect of passing the unmodified environment to the plugin without needing to manually change the environ pointer. |
"Todd C. Miller" <Todd.Miller@sudo.ws> | no | 2026-08-30 | ||
| spanish.patch | improve spanish program translation | Debian Sudo Maintainers <sudo@packages.debian.org> | yes | https://salsa.debian.org/sudo-team/sudo/-/commit/7f12ddebd18ea2021ace59741f773c9c7b476a27 | 2026-04-03 | |
| paths-in-samples.diff | fix paths in sudoers example to match Debian's | Bdale Garbee <bdale@gag.com> | not-needed | 2021-12-13 | ||
| Whitelist-DPKG_COLORS-environment-variable.diff | Whitelist DPKG_COLORS environment variable | Guillem Jover <guillem@hadrons.org> | no | 2016-05-04 | ||
| sudo-ldap-docs.patch | Adapt README.LDAP to the actual state of the sudo-ldap package | Marc Haber <mh+debian-packages@zugschlus.de> | not-needed | 2026-04-03 | ||
| X11R6.patch | patch docs to correct path to ssh-askpass | Marc Haber <mh+debian-packages@zugschlus.de> | not-needed | 2026-04-03 | ||
| 0007-upstream-patch-for-CVE-2025-32463.patch | upstream patch for CVE-2025-32463 | Marc Haber <mh+mr-git@zugschlus.de> | no | 2025-06-24 | ||
| 0008-upstream-patch-for-CVE-2025-32462.patch | upstream patch for CVE-2025-32462 | Marc Haber <mh+debian-packages@zugschlus.de> | no | 2025-06-30 |
All known versions for source package 'sudo'
- 1.9.17p2-11 (sid, forky)
- 1.9.16p2-3+deb13u5 (trixie-proposed-updates)
- 1.9.16p2-3+deb13u2 (trixie)
- 1.9.13p3-1+deb12u4 (bookworm)
- 1.9.13p3-1+deb12u2 (bookworm-security)