Author: Bernhard M. Wiedemann <bwiedemann suse de>
Date: 2020-09-08

Do not leak internal info in vacation mails

Index: vacation-1.2.7.1/vacation.c
===================================================================
--- vacation-1.2.7.1.orig/vacation.c
+++ vacation-1.2.7.1/vacation.c
@@ -350,6 +350,9 @@ main (int argc, char **argv)
   readheaders ();
   if (!recent ())
     {
+      char *comma = strchr(pw->pw_gecos, ',');
+      if(comma && getenv("NO_STRIP_GECOS")==NULL)
+        *comma = 0; // end GECOS string here to not leak internal info
       setreply ();
       (void) gdbm_close (db);
       if (vdomain)