> No, you should grab the OpenBSD patch, as announced on the > security-announce list. > > ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch > ftp://ftp.openbsd.org/pub/OpenBSD/patches/3.7/common/003_sudo.patch
ftp.openbsd.org is having problems at the moment but the patch
is available from the main usa ftp mirror:
ftp://ftp.usa.openbsd.org/pub/OpenBSD/patches/3.6/common/018_sudo.patch
ftp://ftp.usa.openbsd.org/pub/OpenBSD/patches/3.7/common/003_sudo.patch
- todd

