Releases: Duncaen/OpenDoas
Releases · Duncaen/OpenDoas
v6.8.2: Fix for empty argv handling.
v6.8.1
-
This release fixes one major issue that has been assigned CVE-2019-25016.
Rules that allowed the user to execute any command would inherit the
executing users PATH instead of resetting it to a default PATH.
The path will now be correctly reset (d5acd52) to the defined default PATH.Those rules still allow the user to execute any program from their PATH
but executed commands won't inherit the users PATH anymore.Rules that limit the user to execute only a specific command are not affected
by this and are only executed from the default PATH and with the PATH
environment variable set to the safe default.
Other changes are:
v6.8: This release adds the `nolog` option and a few other minor documentation
changes from upstream. Additionally the configure script and makefile had some changes to add support for NetBSD, FreeBSD and Mac OS X.