This patch will upgrade Sudo version 1.6.8 patchlevel 2 to version 1.6.8 patchlevel 3. To apply: cd sudo-1.6.8p2 patch -p1 < sudo-1.6.8p3.patch diff sudo-1.6.8p2/CHANGES sudo-1.6.8p3/CHANGES --- sudo-1.6.8p2/CHANGES Thu Nov 11 14:28:12 2004 +++ sudo-1.6.8p3/CHANGES Tue Nov 16 13:58:56 2004 @@ -1734,7 +1734,15 @@ Sudo 1.6.8p1 released. -549) Bash exported functions and the CDPATH variable are now stripped from - the environment passed to the program to be executed. +549) Bash exported functions are now stripped from the environment passed + to the program to be executed. Sudo 1.6.8p2 released. + +550) The CDPATH variable is now stripped from the environment passed + to the program to be executed. + +551) Fix temp file generation on systems where the _PATH_VARTMP macro + lacks a trailing slash. + +Sudo 1.6.8p3 released. diff sudo-1.6.8p2/Makefile.in sudo-1.6.8p3/Makefile.in --- sudo-1.6.8p2/Makefile.in Thu Nov 11 14:27:52 2004 +++ sudo-1.6.8p3/Makefile.in Tue Nov 16 13:57:30 2004 @@ -130,7 +130,7 @@ LIBOBJS = @LIBOBJS@ @ALLOCA@ -VERSION = 1.6.8p2 +VERSION = 1.6.8p3 DISTFILES = $(SRCS) $(HDRS) BUGS CHANGES HISTORY INSTALL INSTALL.configure \ LICENSE Makefile.in PORTING README README.LDAP RUNSON TODO \ diff sudo-1.6.8p2/env.c sudo-1.6.8p3/env.c --- sudo-1.6.8p2/env.c Thu Nov 11 14:27:25 2004 +++ sudo-1.6.8p3/env.c Tue Nov 16 13:55:47 2004 @@ -88,6 +88,7 @@ */ static const char *initial_badenv_table[] = { "IFS", + "CDPATH", "LOCALDOMAIN", "RES_OPTIONS", "HOSTALIASES", diff sudo-1.6.8p2/sudo.cat sudo-1.6.8p3/sudo.cat --- sudo-1.6.8p2/sudo.cat Thu Nov 11 14:30:42 2004 +++ sudo-1.6.8p3/sudo.cat Tue Nov 16 13:57:00 2004 @@ -61,7 +61,7 @@ -1.6.8p2 November 11, 2004 1 +1.6.8p3 November 16, 2004 1 @@ -127,7 +127,7 @@ -1.6.8p2 November 11, 2004 2 +1.6.8p3 November 16, 2004 2 @@ -193,7 +193,7 @@ -1.6.8p2 November 11, 2004 3 +1.6.8p3 November 16, 2004 3 @@ -259,7 +259,7 @@ -1.6.8p2 November 11, 2004 4 +1.6.8p3 November 16, 2004 4 @@ -325,7 +325,7 @@ -1.6.8p2 November 11, 2004 5 +1.6.8p3 November 16, 2004 5 @@ -391,7 +391,7 @@ -1.6.8p2 November 11, 2004 6 +1.6.8p3 November 16, 2004 6 @@ -457,7 +457,7 @@ -1.6.8p2 November 11, 2004 7 +1.6.8p3 November 16, 2004 7 @@ -523,7 +523,7 @@ -1.6.8p2 November 11, 2004 8 +1.6.8p3 November 16, 2004 8 @@ -589,6 +589,6 @@ -1.6.8p2 November 11, 2004 9 +1.6.8p3 November 16, 2004 9 diff sudo-1.6.8p2/sudo.man.in sudo-1.6.8p3/sudo.man.in --- sudo-1.6.8p2/sudo.man.in Thu Nov 11 14:30:41 2004 +++ sudo-1.6.8p3/sudo.man.in Tue Nov 16 13:56:54 2004 @@ -149,7 +149,7 @@ .\" ======================================================================== .\" .IX Title "SUDO @mansectsu@" -.TH SUDO @mansectsu@ "November 11, 2004" "1.6.8p2" "MAINTENANCE COMMANDS" +.TH SUDO @mansectsu@ "November 16, 2004" "1.6.8p3" "MAINTENANCE COMMANDS" .SH "NAME" sudo, sudoedit \- execute a command as another user .SH "SYNOPSIS" diff sudo-1.6.8p2/sudo_edit.c sudo-1.6.8p3/sudo_edit.c --- sudo-1.6.8p2/sudo_edit.c Wed Sep 15 10:16:20 2004 +++ sudo-1.6.8p3/sudo_edit.c Tue Nov 16 13:55:29 2004 @@ -73,7 +73,7 @@ const char *tmpdir; char **nargv, **ap, *editor, *cp; char buf[BUFSIZ]; - int i, ac, ofd, tfd, nargc, rval; + int i, ac, ofd, tfd, nargc, rval, tmplen; sigaction_t sa; struct stat sb; struct timespec ts1, ts2; @@ -95,6 +95,9 @@ #endif else tmpdir = _PATH_TMP; + tmplen = strlen(tmpdir); + while (tmpdir[tmplen - 1] == '/') + tmplen--; /* * For each file specified by the user, make a temporary version @@ -141,7 +144,7 @@ cp++; else cp = tf[i].ofile; - easprintf(&tf[i].tfile, "%s%s.XXXXXXXX", tmpdir, cp); + easprintf(&tf[i].tfile, "%.*s/%s.XXXXXXXX", tmplen, tmpdir, cp); set_perms(PERM_USER); tfd = mkstemp(tf[i].tfile); set_perms(PERM_ROOT); Only in sudo-1.6.8p3: sudo_edit.c.orig Only in sudo-1.6.8p3: sudo_edit.c.rej diff sudo-1.6.8p2/sudoers.cat sudo-1.6.8p3/sudoers.cat --- sudo-1.6.8p2/sudoers.cat Thu Nov 11 14:31:40 2004 +++ sudo-1.6.8p3/sudoers.cat Tue Nov 16 13:57:02 2004 @@ -61,7 +61,7 @@ -1.6.8p2 November 11, 2004 1 +1.6.8p3 November 16, 2004 1 @@ -127,7 +127,7 @@ -1.6.8p2 November 11, 2004 2 +1.6.8p3 November 16, 2004 2 @@ -193,7 +193,7 @@ -1.6.8p2 November 11, 2004 3 +1.6.8p3 November 16, 2004 3 @@ -259,7 +259,7 @@ -1.6.8p2 November 11, 2004 4 +1.6.8p3 November 16, 2004 4 @@ -325,7 +325,7 @@ -1.6.8p2 November 11, 2004 5 +1.6.8p3 November 16, 2004 5 @@ -391,7 +391,7 @@ -1.6.8p2 November 11, 2004 6 +1.6.8p3 November 16, 2004 6 @@ -457,7 +457,7 @@ -1.6.8p2 November 11, 2004 7 +1.6.8p3 November 16, 2004 7 @@ -523,7 +523,7 @@ -1.6.8p2 November 11, 2004 8 +1.6.8p3 November 16, 2004 8 @@ -589,7 +589,7 @@ -1.6.8p2 November 11, 2004 9 +1.6.8p3 November 16, 2004 9 @@ -655,7 +655,7 @@ -1.6.8p2 November 11, 2004 10 +1.6.8p3 November 16, 2004 10 @@ -721,7 +721,7 @@ -1.6.8p2 November 11, 2004 11 +1.6.8p3 November 16, 2004 11 @@ -787,7 +787,7 @@ -1.6.8p2 November 11, 2004 12 +1.6.8p3 November 16, 2004 12 @@ -853,7 +853,7 @@ -1.6.8p2 November 11, 2004 13 +1.6.8p3 November 16, 2004 13 @@ -919,7 +919,7 @@ -1.6.8p2 November 11, 2004 14 +1.6.8p3 November 16, 2004 14 @@ -985,7 +985,7 @@ -1.6.8p2 November 11, 2004 15 +1.6.8p3 November 16, 2004 15 @@ -1051,7 +1051,7 @@ -1.6.8p2 November 11, 2004 16 +1.6.8p3 November 16, 2004 16 @@ -1117,7 +1117,7 @@ -1.6.8p2 November 11, 2004 17 +1.6.8p3 November 16, 2004 17 @@ -1183,7 +1183,7 @@ -1.6.8p2 November 11, 2004 18 +1.6.8p3 November 16, 2004 18 @@ -1249,7 +1249,7 @@ -1.6.8p2 November 11, 2004 19 +1.6.8p3 November 16, 2004 19 @@ -1315,7 +1315,7 @@ -1.6.8p2 November 11, 2004 20 +1.6.8p3 November 16, 2004 20 @@ -1381,7 +1381,7 @@ -1.6.8p2 November 11, 2004 21 +1.6.8p3 November 16, 2004 21 @@ -1447,7 +1447,7 @@ -1.6.8p2 November 11, 2004 22 +1.6.8p3 November 16, 2004 22 @@ -1513,6 +1513,6 @@ -1.6.8p2 November 11, 2004 23 +1.6.8p3 November 16, 2004 23 diff sudo-1.6.8p2/sudoers.man.in sudo-1.6.8p3/sudoers.man.in --- sudo-1.6.8p2/sudoers.man.in Thu Nov 11 14:31:38 2004 +++ sudo-1.6.8p3/sudoers.man.in Tue Nov 16 13:56:56 2004 @@ -149,7 +149,7 @@ .\" ======================================================================== .\" .IX Title "SUDOERS @mansectform@" -.TH SUDOERS @mansectform@ "November 11, 2004" "1.6.8p2" "MAINTENANCE COMMANDS" +.TH SUDOERS @mansectform@ "November 16, 2004" "1.6.8p3" "MAINTENANCE COMMANDS" .SH "NAME" sudoers \- list of which users may execute what .SH "DESCRIPTION" diff sudo-1.6.8p2/version.h sudo-1.6.8p3/version.h --- sudo-1.6.8p2/version.h Thu Nov 11 14:27:55 2004 +++ sudo-1.6.8p3/version.h Tue Nov 16 13:57:33 2004 @@ -23,6 +23,6 @@ #ifndef _SUDO_VERSION_H #define _SUDO_VERSION_H -static const char version[] = "1.6.8p2"; +static const char version[] = "1.6.8p3"; #endif /* _SUDO_VERSION_H */ diff sudo-1.6.8p2/visudo.cat sudo-1.6.8p3/visudo.cat --- sudo-1.6.8p2/visudo.cat Thu Nov 11 14:31:33 2004 +++ sudo-1.6.8p3/visudo.cat Tue Nov 16 13:57:16 2004 @@ -61,7 +61,7 @@ -1.6.8p2 November 11, 2004 1 +1.6.8p3 November 16, 2004 1 @@ -127,7 +127,7 @@ -1.6.8p2 November 11, 2004 2 +1.6.8p3 November 16, 2004 2 @@ -193,6 +193,6 @@ -1.6.8p2 November 11, 2004 3 +1.6.8p3 November 16, 2004 3 diff sudo-1.6.8p2/visudo.man.in sudo-1.6.8p3/visudo.man.in --- sudo-1.6.8p2/visudo.man.in Thu Nov 11 14:31:31 2004 +++ sudo-1.6.8p3/visudo.man.in Tue Nov 16 13:56:58 2004 @@ -149,7 +149,7 @@ .\" ======================================================================== .\" .IX Title "VISUDO @mansectsu@" -.TH VISUDO @mansectsu@ "November 11, 2004" "1.6.8p2" "MAINTENANCE COMMANDS" +.TH VISUDO @mansectsu@ "November 16, 2004" "1.6.8p3" "MAINTENANCE COMMANDS" .SH "NAME" visudo \- edit the sudoers file .SH "SYNOPSIS"