Hi Marcel,

On Tue, Nov 03, 2026 at 06:25:59PM +0100, Marcel Jueling wrote:
Package: sudo
Version: 1.9.16p2-3+deb13u2
Severity: normal
Tags: patch

Dear Debian Sudo Maintainers,

The sudoers parser generation rule in plugins/sudoers/Makefile.in uses an ordinary multi-target rule:

|$(devdir)/gram.c $(devdir)/gram.h: $(srcdir)/gram.y prologue|

The recipe invokes Bison to generate both parser files. Under parallel builds, the ordinary multi-target rule may cause the recipe to be invoked more than once. Duplicate Bison invocations were observed in build logs. The logs do not establish whether the invocations actually overlapped, but the shared temporary output files make this a potential race.

Can you reproduce this on Debian unstable? We are not going to issue a stable update to fix this.

If this is still present in unstable, I'd encourage you to file an upstream bug about this, as this fix is probably interesting for all distibutions shipping sudo.

Greetings
Marc

--
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421

Reply via email to