Bug#841371: /usr/bin/install: should use fchown, fchmod

2017-01-02 Thread Moritz Muehlenhoff
On Thu, Oct 20, 2016 at 10:30:46AM +1100, Paul Szabo wrote: > Package: coreutils > Version: 8.23-4 > Severity: important > File: /usr/bin/install > > > The install command is vulnerable to a race condition. > > If used by root to create a file in a directory writable to users or > groups other t

Bug#841371: /usr/bin/install: should use fchown, fchmod

2016-10-19 Thread Paul Szabo
Package: coreutils Version: 8.23-4 Severity: important File: /usr/bin/install The install command is vulnerable to a race condition. If used by root to create a file in a directory writable to users or groups other than root, then after install creates the file, the file just created could be re