Your message dated Thu, 01 Jan 2026 13:02:31 +0000
with message-id <[email protected]>
and subject line Bug#1124339: fixed in sudo 1.9.13p3-1+deb12u3
has caused the Debian Bug report #1124339,
regarding enable intel CET on amd64 only
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
1124339: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1124339
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: sudo
Version: 1.9.13p3-1
Severity: important
X-Debbugs-Cc: [email protected]
User: [email protected]
Usertags: amd64
User: [email protected]
Usertags: i386
Hi,
this bug only affects bookworm, and only i386 systems running on one of
those not-so-quite-i686 CPUs that unfortunately incudes the rather
common AMD Geode. There was discussion with the ctte (#1113774) and
their advice was to enable the offending hardening option (Intel CET
which hides itself behind -fcf-protection) on AMD64 only.
This will probably also fix #1004894.
Bookworm is the last Debian release that supports i386 as a full
architecture. It is therefore expected that this sudo version is going
to be used on i386 systems for a long time. On current systems, i386 is
likely to be used in containers and chroots and multiarch setups only,
so using an amd64 sudo on such systems is advised. Independe of an
upstream fix that is on the way, there is no update for trixie and newer
necessary for this reason.
The patch was submitted by Marcos Del Sol Vives. I verified that the
patched package built on bookworm delivers a byte identical package on
amd64 and a different one on i386. I did not do any further testing.
Greetings
Marc
--- End Message ---
--- Begin Message ---
Source: sudo
Source-Version: 1.9.13p3-1+deb12u3
Done: Marc Haber <[email protected]>
We believe that the bug you reported is fixed in the latest version of
sudo, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Marc Haber <[email protected]> (supplier of updated sudo package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Tue, 30 Dec 2025 21:07:33 +0100
Source: sudo
Architecture: source
Version: 1.9.13p3-1+deb12u3
Distribution: bookworm
Urgency: medium
Maintainer: Sudo Maintainers <[email protected]>
Changed-By: Marc Haber <[email protected]>
Closes: 1124339
Changes:
sudo (1.9.13p3-1+deb12u3) bookworm; urgency=medium
.
* Apply a patch fro Marcos Del Sol Vives to Enable Intel CET on amd64 only.
This has been discussed with the TC in #1113774. After following their
advice to apply the patch, I verified that this change produces an
identical deb on amd64 (Closes: #1124339)
Checksums-Sha1:
69f5051594c04dbf2fe97b99f99b26413a86163f 2605 sudo_1.9.13p3-1+deb12u3.dsc
19c3344afe053e65a9099649c316b99975cad88a 43056
sudo_1.9.13p3-1+deb12u3.debian.tar.xz
0d339756333cb2e8e5d304e74dfbda2cfe0d2578 6222
sudo_1.9.13p3-1+deb12u3_source.buildinfo
Checksums-Sha256:
75c8c274c704fdbd2a8d91a11f52c14f0c133faab5564906c6d8ada5977a1c5e 2605
sudo_1.9.13p3-1+deb12u3.dsc
82e1897d352a88e5d741f40bbae0333e24a86e0e232fd4b11c27d9c5b9585584 43056
sudo_1.9.13p3-1+deb12u3.debian.tar.xz
977df85c3e2acfbb1880a7dc33125645fa62dca7e7df2428fb5584d58a8b8e03 6222
sudo_1.9.13p3-1+deb12u3_source.buildinfo
Files:
b3eb15128c4daaee3e194a57393e2ba7 2605 admin optional
sudo_1.9.13p3-1+deb12u3.dsc
d1e12ccf8d2d71e4ed6408cb5a0bf8cb 43056 admin optional
sudo_1.9.13p3-1+deb12u3.debian.tar.xz
0ff941179bff7d6bc2634e65dc79349d 6222 admin optional
sudo_1.9.13p3-1+deb12u3_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=10P2
-----END PGP SIGNATURE-----
pgpYwCQ3ZuQTp.pgp
Description: PGP signature
--- End Message ---
