v2.19.2

Patch Changes

• 40315cf Thanks @tufantunc! - privileged-command: harden how the sudo password reaches sudo, and always scrub the configured sudo password from command output. The wrapped command now runs with stdin at EOF; approval prompts and audit records show exec 0</dev/null; inside the wrapped sudo … sh -c string.

Security

• Fixed GHSA-9m75-x2ch-j4jr: privileged-command could leave the sudo password readable by the wrapped command when sudo did not prompt (e.g. NOPASSWD); the command's stdin is now /dev/null and the configured sudo password is always scrubbed from output. Reported by @shinjiyu. Affected: <= 2.19.1.