As promised...this takes the same approach as before - dropping the egid
before calls to open() or creat().  I made another pass through the code
to make sure there weren't any other vulnerable calls, so this should
finally kill these bugs.  I tested using the reproducer to confirm it
fixes the race, and made sure functionality is still intact.

** Patch added: "New patch for movemail"
   http://launchpadlibrarian.net/41882940/movemail.patch

-- 
Emacs movemail race condition
https://bugs.launchpad.net/bugs/531569
You received this bug notification because you are a member of Ubuntu
Bugs, which is a direct subscriber.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to