1 files changed, 78 insertions, 0 deletions
diff --git a/debian/NEWS b/debian/NEWS
new file mode 100644
index 0000000..dda489a
--- /dev/null
+++ b/debian/NEWS
@@ -0,0 +1,78 @@
+sudo (1.9.15p2-1) unstable; urgency=medium
+
+  sudo-ldap has become a burden to maintain. This is mainly due to the fact
+  that the sudo team has neither the manpower nor the know-how to maintain
+  sudo-ldap adequately.
+
+  In practice, there are few installations that use sudo-ldap. Most
+  installations that use LDAP as a directory service and sudo have now opted
+  for sssd, sssd-ldap and libsss-sudo.
+
+  The Debian sudo team recommends the use of libsss-sudo for new
+  installations and the migration of existing installations from sudo-ldap
+   to libsss-sudo and sssd.
+
+  The combination of sudo and sssd is automatically tested in autopkgtest
+  of sudo.
+
+  This is also being discussed in #1033728 in the Debian BTS.
+
+  Debian 13, "trixie", will be the last version of Debian that supports
+  sudo-ldap. Please use the bookworm and trixie release cycles to migrate
+  your installation away from sudo-ldap.
+
+  Please make sure that you do not upgrade from Debian 13 to Debian 14
+  while you're still using sudo-ldap. This is not going to work and
+  will probably leave you without intended privilege escalation.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de>  Mon, 20 Nov 2023 10:07:57 +0100
+
+sudo (1.9.5p2-3) unstable; urgency=medium
+
+  We have added "Defaults use_pty" to the default configuration. This fixes
+  CVE-2005-4890 which has been lingering around for more then a decade.
+  If you would like the old behavior back, please remove the respective line
+  from /etc/sudoers.
+
+ -- Marc Haber <mh+debian-packages@zugschlus.de>  Wed, 24 Feb 2021 17:59:22 +0100
+
+sudo (1.8.2-1) unstable; urgency=low
+
+  The sudo package is no longer configured using --with-secure-path.
+  Instead, the provided sudoers file now contains a line declaring
+  'Defaults secure_path=' with the same path content that was previously
+  hard-coded in the binary.  A consequence of this change is that if you
+  do not have such a definition in sudoers, the PATH searched for commands
+  by sudo may be empty.
+
+  Using explicit paths for each command you want to run with sudo will work
+  well enough to allow the sudoers file to be updated with a suitable entry
+  if one is not already present and you choose to not accept the updated
+  version provided by the package.
+  
+ -- Bdale Garbee <bdale@gag.com>  Wed, 24 Aug 2011 13:33:11 -0600
+
+sudo (1.7.4p4-2) unstable; urgency=low
+
+  The HOME and MAIL environment variables are now reset based on the
+  target user's password database entry when the env_reset sudoers option
+  is enabled (which is the case in the default configuration).  Users
+  wishing to preserve the original values should use a sudoers entry like:
+     Defaults env_keep += HOME
+  to preserve the old value of HOME and
+     Defaults env_keep += MAIL
+  to preserve the old value of MAIL.
+
+  The change in handling of HOME is known to affect programs like pbuilder.
+
+ -- Bdale Garbee <bdale@gag.com>  Wed, 08 Sep 2010 14:29:16 -0600
+
+sudo (1.6.8p12-5) unstable; urgency=low
+
+  The sudo package is no longer configured --with-exempt=sudo.  If you 
+  depend on members of group sudo being able to run sudo without needing
+  a password, you will need to put "%sudo ALL=NOPASSWD: ALL" in 
+  /etc/sudoers to preserve equivalent functionality.
+
+ -- Bdale Garbee <bdale@gag.com>  Tue,  3 Apr 2007 21:13:39 -0600
+