Subject: CVS commit: pkgsrc/security/sudo
To: None <pkgsrc-changes@NetBSD.org>
From: Quentin Garnier <cube@netbsd.org>
List: pkgsrc-changes
Date: 11/26/2004 16:23:57
Module Name: pkgsrc
Committed By: cube
Date: Fri Nov 26 16:23:57 UTC 2004
Modified Files:
pkgsrc/security/sudo: Makefile distinfo
Log Message:
sudo is nominated for crapware of the year. Now at version 1.6.8pl4!
Just as for pl2, changes are about environment sanitizing, meaning there
are possible security issues with current versions.
Changes:
550) The CDPATH variable is now stripped from the environment passed
to the program to be executed.
551) Fix temp file generation on systems where the _PATH_VARTMP macro
lacks a trailing slash.
552) The KRB5CCNAME environment variable is preserved during sudo
execution for password lookups that use GSSAPI.
To generate a diff of this commit:
cvs rdiff -r1.73 -r1.74 pkgsrc/security/sudo/Makefile
cvs rdiff -r1.24 -r1.25 pkgsrc/security/sudo/distinfo
Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.