-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 11 Apr 2026 14:21:02 +0200
Source: sudo
Architecture: source
Version: 1.9.16p2-3+deb13u2
Distribution: trixie
Urgency: medium
Maintainer: Debian Sudo Maintainers <sudo@packages.debian.org>
Changed-By: Marc Haber <mh+debian-packages@zugschlus.de>
Closes: 1130593
Changes:
 sudo (1.9.16p2-3+deb13u2) trixie; urgency=medium
 .
   * cherry-pick upstream exec_mailer-Set-group-as-well-as-uid.
     This is upstream and fixes CVE-2026-35535:
     https://github.com/sudo-project/sudo/commit/3e474c2 (Closes: #1130593)
Checksums-Sha1:
 b6448ab0172d588a5012291ca0fa45fa766f7425 2740 sudo_1.9.16p2-3+deb13u2.dsc
 56d9978587a5eec56d9488f80fb234a381ae2eec 5398419 sudo_1.9.16p2.orig.tar.gz
 00a97d3d10673dfe1f33633fc6992c479015c201 833 sudo_1.9.16p2.orig.tar.gz.asc
 48e82db26e10dde463f9907af4eec08d72f9e4a3 69124 sudo_1.9.16p2-3+deb13u2.debian.tar.xz
 0ae211783a2ecbceac3d54d6724504979f718a5e 6314 sudo_1.9.16p2-3+deb13u2_source.buildinfo
Checksums-Sha256:
 43ba6f6bad19d018e277d6a5a6cdc5245f16d58082f997fc29897081a632bfce 2740 sudo_1.9.16p2-3+deb13u2.dsc
 976aa56d3e3b2a75593307864288addb748c9c136e25d95a9cc699aafa77239c 5398419 sudo_1.9.16p2.orig.tar.gz
 52f2a33420ffe6cc2e150f056e51fccf9f3abb6e82c094c7b7b89401ffb62c01 833 sudo_1.9.16p2.orig.tar.gz.asc
 4479f56745559b879a5ef1a29d3bd41d6b44644888212169eea8c3a363a9b99c 69124 sudo_1.9.16p2-3+deb13u2.debian.tar.xz
 895e384425563bf34eb77777910e7e9c7ab3902440aea248579d8936515b651f 6314 sudo_1.9.16p2-3+deb13u2_source.buildinfo
Files:
 de5557abd9da23215cee4b96ee1aaff7 2740 admin optional sudo_1.9.16p2-3+deb13u2.dsc
 52681ba928fb7aba46998f061d9ba85c 5398419 admin optional sudo_1.9.16p2.orig.tar.gz
 f73746b7d6ef034164ab24035bb5d01e 833 admin optional sudo_1.9.16p2.orig.tar.gz.asc
 1725e07b6ca4a8c708fc95b5b619179b 69124 admin optional sudo_1.9.16p2-3+deb13u2.debian.tar.xz
 dc7bb0a181171bd8f21203d315b55a08 6314 admin optional sudo_1.9.16p2-3+deb13u2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=AIl2
-----END PGP SIGNATURE-----