Please merge 0.2.10-1 into resolute

[Simon Johnsson]

tracking bug

PPA: https://launchpad.net/~bamf0/+archive/ubuntu/resolute-sudo-rs-merge-lp2130702
Repository: https://code.launchpad.net/~bamf0/ubuntu/+source/rust-sudo-rs/+git/rust-sudo-rs/+ref/merge-lp2130702-resolute

[Simon Johnsson (bamf0)]

The merged version of sudo-rs has been uploaded to a PPA (https://launchpad.net/~bamf0/+archive/ubuntu/resolute-sudo-rs-merge-lp2130702)

The autopkgtest results are as follows:
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [amd64]
    + ✅ rust-sudo-rs on resolute for amd64 @ 12.11.25 08:54:48
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/amd64/r/rust-sudo-rs/20251112_085448_e6593@/log.gz
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [arm64]
    + ✅ rust-sudo-rs on resolute for arm64 @ 12.11.25 08:55:37
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/arm64/r/rust-sudo-rs/20251112_085537_10985@/log.gz
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [armhf]
    + ✅ rust-sudo-rs on resolute for armhf @ 12.11.25 08:57:10
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/armhf/r/rust-sudo-rs/20251112_085710_99eb7@/log.gz
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [i386]
    + ✅ rust-sudo-rs on resolute for i386 @ 12.11.25 08:54:44
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/i386/r/rust-sudo-rs/20251112_085444_faad1@/log.gz
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [ppc64el]
    + ✅ rust-sudo-rs on resolute for ppc64el @ 12.11.25 08:55:04
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/ppc64el/r/rust-sudo-rs/20251112_085504_e6d5c@/log.gz
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [riscv64]
    + ⛔ rust-sudo-rs on resolute for riscv64 @ 12.11.25 09:03:18
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/riscv64/r/rust-sudo-rs/20251112_090318_654a7@/log.gz
      • Status: BAD
      • testbed BAD ⛔
  - rust-sudo-rs: resolute/rust-sudo-rs/0.2.10-1ubuntu1~resolute1 [s390x]
    + ✅ rust-sudo-rs on resolute for s390x @ 12.11.25 08:54:39
      • Log: https://autopkgtest.ubuntu.com/results/autopkgtest-resolute-bamf0-resolute-sudo-rs-merge-lp2130702/resolute/s390x/r/rust-sudo-rs/20251112_085439_ecf6c@/log.gz

[Simon Johnsson (bamf0)]

Simple smoke tests have been performed in a container using the ubuntu-daily:resolute container image.
These include:

  1) Installation verification:
    - `sudo --version` outputs 0.2.10 ✅
    - `sudo-rs --version` outputs 0.2.10 ✅
  2) Core sudo tests
    - `sudo id` prints the root user's identity ✅
    - `sudo id` with the wrong passwords gives authentication failure ✅
    - `sudo -u nobody id` gives the nobody user's identity ✅
  3) CVE fixes introduced in 0.2.10 are valid ✅
    - https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-q428-6v73-fc4q
    - https://github.com/trifectatechfoundation/sudo-rs/security/advisories/GHSA-c978-wq47-pvvw

[Simon Johnsson (bamf0)]

Merge proposal is now in progress.

[Launchpad Janitor (janitor)]

This bug was fixed in the package rust-sudo-rs - 0.2.10-1ubuntu1

---------------
rust-sudo-rs (0.2.10-1ubuntu1) resolute; urgency=medium

  * Merge with Debian unstable (LP: #2130702). Remaining changes:
    - Add Breaks for sudo and sudo-ldap
    - Add depends on sudo (>= 1.9.16p2-3ubuntu2~)
    - Add Recommends libapparmor1
    - Add sudo alternatives
    - Add vendored dependencies for 0.2.10
    - Enable feature apparmor
    - Move test command to script in debian/tests
    - Remove librust-sudo-rs-dev
    - Remove irrelevant patches
      + d/p/disable-test-timeout.diff: Debian specific since 0.2.5.
      + d/p/drop-unused-features.patch: Features used in Ubuntu.
    - Set setuid bit after dh_fixperms
    - Skip pandoc on i386
    - Skip test_build_run_context test_traverse_secure_open_positive
    - Update copyright information
  * Dropped delta:
    - d/p/post_028/: Containing patches fixed in 0.2.10

rust-sudo-rs (0.2.10-1) unstable; urgency=high

  * Team upload.
  * Package sudo-rs 0.2.10 from crates.io using debcargo 2.7.11
    - Ensure (partially) input passwords are not printed if killed during
      password prompt (Fixes: GHSA-q428-6v73-fc4q)
    - Ensure `Defaults targetpw` and `Defaults rootpw` are taken into account
      for timestamp files (Fixes: GHSA-c978-wq47-pvvw)

rust-sudo-rs (0.2.9-1) unstable; urgency=medium

  * Team upload.
  * drop unneeded dev-related features
  * enable pam-login feature
  * enable sudoedit feature
  * make `su` binary setuid in postinst (Closes: #1108015)
  * Package sudo-rs 0.2.9 from crates.io using debcargo 2.7.11
    - Bump Standards-Version to 4.7.2
    - Update d/watch to uscan v5
    - Drop default RRR³ "no" value
    - Drop M-A "allowed"

 -- Simon Johnsson <email address hidden> Tue, 11 Nov 2025 17:46:16 +0100