Hi

Today, I had a look at the new upstream version 1.7.1, in order to fix 
unstable and testing. Thew new upstream version uses a function called 
mktempf () . There you generate the tempfile. However, you do not use 
the "mktemp" program. I did not try it so far, but I think that it is 
possible to guess the temp file, because you use 
_TMPFILE="$TMPDIR/`basename $0`.`date '+%Y%m%d-%H%M%S'`.$$"

I would suggest using mktemp instead, which creates unique temporary 
filenames, which cannot be guessed.

Cheers
Steffen

Attachment: signature.asc
Description: This is a digitally signed message part.

Reply via email to