<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=us-ascii"> <meta name="Generator" content="Microsoft Exchange Server">  <style></style> </head> <body> <font face="Calibri" size="2"><span style="font-size:11pt;"> <div>Hello,</div> <div>I was looking in source code of libpam 1.2.1 ( Linux-PAM-1.2.1/modules/pam_env/pam_env.c) and I don’t see fix for </div> <div>Security vulnerability issue CVE-2010-4708.</div> <div> </div> <div>Should not DEFAULT_USER_READ_ENVFILE be defined as </div> <div>#define DEFAULT_USER_READ_ENVFILE 1</div> <div> </div> <div>Please suggest if this security issue is fix in different way in release 1.2.1 Or</div> <div>I still need a patch for CVE-2010-4708 ?</div> <div> </div> <div>Regards,</div> <div> </div> <div>Amol T</div> <div> </div> <div> </div> </span></font> </body> </html>