-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 14:01:23 +0200
Source: sudo
Architecture: source
Version: 1.9.13p3-1+deb12u4
Distribution: bookworm
Urgency: medium
Maintainer: Sudo Maintainers <sudo@packages.debian.org>
Changed-By: Marc Haber <mh+debian-packages@zugschlus.de>
Closes: 1130593
Changes:
 sudo (1.9.13p3-1+deb12u4) bookworm; urgency=medium
 .
   * cherry-pick upstream exec_mailer-Set-group-as-well-as-uid.
     This is adapted from upstream and fixes CVE-2026-35535:
     https://github.com/sudo-project/sudo/commit/3e474c2 (Closes: #1130593)
Checksums-Sha1:
 fe7ae9b189ca4e54d25e875569c79380856dcd41 2605 sudo_1.9.13p3-1+deb12u4.dsc
 a165db767eaec1af2c575e8e23055666af7423e6 44336 sudo_1.9.13p3-1+deb12u4.debian.tar.xz
 c2618f4cf26c92aa536ae0cbbe7cbc339e2be507 6619 sudo_1.9.13p3-1+deb12u4_source.buildinfo
Checksums-Sha256:
 48308278bfbef2070b1f47492e39f9e7ac8ff9705aa6c390cd174b5e214c1089 2605 sudo_1.9.13p3-1+deb12u4.dsc
 4c6c7ca0894b431c4d22f8bfd6f032cc0651c60b0cd50f098dee154c11ff4b2d 44336 sudo_1.9.13p3-1+deb12u4.debian.tar.xz
 b0c7fd17f0e69423ef70c829502ab6dea7c539e4c4117d7d0f972ae40166b6c6 6619 sudo_1.9.13p3-1+deb12u4_source.buildinfo
Files:
 29e057d24bbd963a573a9a5d0a27b831 2605 admin optional sudo_1.9.13p3-1+deb12u4.dsc
 a29495ff449a3653e200de0f7a4016f7 44336 admin optional sudo_1.9.13p3-1+deb12u4.debian.tar.xz
 4463175b797739c46d238a35e3f862ee 6619 admin optional sudo_1.9.13p3-1+deb12u4_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=CP1a
-----END PGP SIGNATURE-----