add a news entry

diff --git a/debian/NEWS b/debian/NEWS
index d59d56fcea65907025cdd107e363c09cc4886ac1..3c0b573100c7d6a2fc5db13cf438de4c509690db 100644 (file)
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,19 @@
+sudo (1.8.2-1) unstable; urgency=low
+
+  The sudo package is no longer configured using --with-secure-path.
+  Instead, the provided sudoers file now contains a line declaring
+  'Defaults secure_path=' with the same path content that was previously
+  hard-coded in the binary.  A consequence of this change is that if you
+  do not have such a definition in sudoers, the PATH searched for commands
+  by sudo may be empty.
+
+  Using explicit paths for each command you want to run with sudo will work
+  well enough to allow the sudoers file to be updated with a suitable entry
+  if one is not already present and you choose to not accept the updated
+  version provided by the package.
+  
+ -- Bdale Garbee <bdale@gag.com>  Wed, 24 Aug 2011 13:33:11 -0600
+
 sudo (1.7.4p4-2) unstable; urgency=low
 
   The HOME and MAIL environment variables are now reset based on the

diff --git a/debian/changelog b/debian/changelog
index e04a986fd0a64f3d6554f68df9a58c74d1bf58b2..78993b60dc20f8a9e43d83911972d01efd0529c0 100644 (file)
--- a/debian/changelog
+++ b/debian/changelog
@@ -11,6 +11,8 @@ sudo (1.8.2-2) UNRELEASED; urgency=low
     when sudo is used in cron, etc, closes: #519700
   * patch from Steven McDonald to fix segfault on startup under certain
     conditions, closes: #639568
+  * add a NEWS entry regarding the secure_path change made in 1.8.2-1, 
+    closes: #639336
 
  -- Bdale Garbee <bdale@gag.com>  Mon, 26 Sep 2011 21:55:56 -0600