This bug was fixed in the package sudo - 1.9.5p2-2ubuntu3
---
sudo (1.9.5p2-2ubuntu3) hirsute; urgency=medium
* No change rebuild with fixed ownership.
-- Dimitri John Ledkov Thu, 18 Feb 2021 00:03:21
+
** Changed in: sudo (Ubuntu)
Status: Fix Committed => Fix
** Tags removed: block-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1915307
Title:
Please merge sudo 1.9.5p2-2 (main) from Debian unstable (main)
Status in sudo
Looks like the permissions issue is caused by
https://bugs.launchpad.net/ubuntu/+source/fakeroot/+bug/1915250 and
everything is now frozen until that is fixed.
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
** Tags added: block-proposed
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1915307
Title:
Please merge sudo 1.9.5p2-2 (main) from Debian unstable (main)
Status in sudo
The version of sudo in the repos already prior to this
(1.9.4p2-2ubuntu3) works as expected, though, with proper permissions
being set:
root@hirsute-test:~# apt-cache policy sudo
sudo:
Installed: 1.9.4p2-2ubuntu3
Candidate: 1.9.4p2-2ubuntu3
Version table:
1.9.5p2-2ubuntu1 400
Confirmed the regression that iLogin sees.
>From within a hirsute daily LXD container with full apt update and apt
dist-upgrade done to it, with `sudo apt install -t hirsute-proposed
sudo` done to get the sudo AND updated libc it requires):
root@hirsute-test:~# ls -al $(which sudo)
-rwsr-xr-x 1
Yep
** Attachment added: "Screenshot_20210216_040220.png"
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1915307/+attachment/5464005/+files/Screenshot_20210216_040220.png
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed
@iLogin - this is likely caused by
https://bugs.launchpad.net/ubuntu/+source/fakeroot/+bug/1915250
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1915307
Title:
Please merge
sudo 1.9.5p2-2ubuntu1
sudo: /usr/bin/sudo must be owned by uid 0 and have the setuid bit set
...
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1915307
Title:
Please merge
Debdiff in comment #5 looks good. There was a missing double space
between your email and the date in debian/changelog that was causing a
lintian error.
I fixed the missing space and uploaded it to hirsute.
Thanks!
** Changed in: sudo (Ubuntu)
Status: In Progress => Fix Committed
--
Thanks, this looks good to me but out of an abundance of caution (this
is sudo, after all), I'm going to get Marc from the security team to
take a look -- it seems the upstream fixes for the CVE are a bit
different from the ones currently in Ubuntu and I'd like him to verify
that we think upstream
** Changed in: sudo (Ubuntu)
Importance: Undecided => Wishlist
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/1915307
Title:
Please merge sudo 1.9.5p2-2 (main) from
This new diff from debian drops the whitespace changes and adds the
dropped CVE patches to the changelog
** Patch added: "Diff from Debian take two"
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1915307/+attachment/5463220/+files/debian-ubuntu.debdiff
--
You received this bug
Hi, this looks mostly very good! I have some tiny nitpicks:
1) It's good to mention the patches that are being dropped in the changelog
entry.
2) There are some whitespace changes in the bottom of the changelog that you
could drop if you felt like it.
--
You received this bug notification
The attachment "Diff from Debian" seems to be a debdiff. The ubuntu-
sponsors team has been subscribed to the bug report so that they can
review and hopefully sponsor the debdiff. If the attachment isn't a
patch, please remove the "patch" flag from the attachment, remove the
"patch" tag, and if
** Patch added: "Diff from latest Ubuntu version"
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1915307/+attachment/5462731/+files/ubuntu-ubuntu.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in
** Patch added: "Diff from Debian"
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1915307/+attachment/5462721/+files/debian-ubuntu.debdiff
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to sudo in Ubuntu.
** Description changed:
This requires a merge because there are changes in the Ubuntu version
not present in the Debian version.
+
+ -- Justification of patches removed from debian/patches/series --
+ * typo-in-classic-insults.diff
+ * This exact patch is present in upstream
18 matches
Mail list logo
