Package: sudo
Version: 1.9.13p3-1+deb12u1
Severity: important
Tags: patch
X-Debbugs-Cc: arou...@nvidia.com

Dear Maintainer,

>From sudo version 1.9.4 to version 1.9.14, there is a bug breaking pam-script
environment variables: https://github.com/sudo-project/sudo/issues/318

Because of this bug, pam-script called through a sudo command are not getting
called with the necessary filled PAM_* environment variables for the pam scripts
to perform their checks.

For example, if the command executed is "sudo ls", then a pam-script should get
the PAM_SERVICE populated to be "sudo". That is not the case with debian 12
sudo package where PAM_SERVICE, in this sudo scenario, is simply empty.

Would it be possible to backport the upstream fix or update sudo to 1.9.15 in
the Debian 12 repositories? We are experiencing the same issue described in
the Github link.

-- System Information:
Debian Release: 12.5
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.1.0-cl-1-amd64 (SMP w/8 CPU threads; PREEMPT)
Kernel taint flags: TAINT_OOT_MODULE
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE not set
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages sudo depends on:
ii  init-system-helpers  1.65.2
ii  libaudit1            1:3.0.9-1
ii  libc6                2.36-9+deb12u4
ii  libpam-modules       1.5.2-6+deb12u1
ii  libpam0g             1.5.2-6+deb12u1
ii  libselinux1          3.4-1+b6
ii  zlib1g               1:1.2.13.dfsg-1

sudo recommends no packages.

sudo suggests no packages.

-- Configuration Files:
/etc/sudoers [Errno 13] Permission denied: '/etc/sudoers'
/etc/sudoers.d/README [Errno 13] Permission denied: '/etc/sudoers.d/README'

-- no debconf information

Reply via email to