You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.280,
ImprovementsSection of the release
What
OPENSSL_CONF was added to the list of environment variables (alongside LD_PRELOAD, LD_AUDIT, DYLD_INSERT_LIBRARIES, NLSPATH) that get special, security-motivated handling, typically stripped when spawning subprocesses.
LOCPATH was likewise added to that list of guarded environment variables (which also includes LD_AUDIT, GCONV_PATH, NLSPATH, PSMODULEPATH, DYLD_INSERT_LIBRARIES).
Why
This closes off more ways a malicious or misconfigured environment variable could inject unexpected behavior into subprocesses that Claude Code spawns.
