for 1.5.6

diff --git a/BUGS b/BUGS
index 4540442797a21011226567f8d83b5b8f0bb49f5a..96f857f3c83a9ba475eb2b3d6ce6d4bd2e0802c2 100644 (file)
--- a/BUGS
+++ b/BUGS
@@ -12,3 +12,9 @@ Known bugs in sudo version 1.5.6
 
 4) Cmnd_Alias's need to precede permissions specs.  At the very least,
    visudo should give an error if you get this wrong.
+
+5) A user can use sudo to gather information on what executables
+   exist on a system, even ones that would not normally be accessible.
+
+6) There is still a bug in the ``sudo -l'' processing code that can
+   cause sudo to get a SEGV.  I've not been able to track it down yet.