unofficial mirror of bug-gnu-emacs@gnu.org 
 help / color / mirror / code / Atom feed
* bug#17415: insecure temp file in tramp-uudecode
@ 2014-05-06  4:00 Glenn Morris
  2014-05-06  9:53 ` Michael Albinus
  0 siblings, 1 reply; 2+ messages in thread
From: Glenn Morris @ 2014-05-06  4:00 UTC (permalink / raw)
  To: 17415; +Cc: michael.albinus

Package: emacs
Version: 24.3.90
Severity: important
Tags: security

http://bugs.debian.org/747100 points out that tramp-uudecode (now defined
tramp-sh.el) uses a predictable temp-file name.





^ permalink raw reply	[flat|nested] 2+ messages in thread

* bug#17415: insecure temp file in tramp-uudecode
  2014-05-06  4:00 bug#17415: insecure temp file in tramp-uudecode Glenn Morris
@ 2014-05-06  9:53 ` Michael Albinus
  0 siblings, 0 replies; 2+ messages in thread
From: Michael Albinus @ 2014-05-06  9:53 UTC (permalink / raw)
  To: Glenn Morris; +Cc: 17415-done

Version: 24.4

Glenn Morris <rgm@gnu.org> writes:

> http://bugs.debian.org/747100 points out that tramp-uudecode (now defined
> tramp-sh.el) uses a predictable temp-file name.

Indeed. I've fixed this in the emacs-24 branch, closing the bug.

Best regards, Michael.





^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2014-05-06  9:53 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2014-05-06  4:00 bug#17415: insecure temp file in tramp-uudecode Glenn Morris
2014-05-06  9:53 ` Michael Albinus

Code repositories for project(s) associated with this public inbox

	https://git.savannah.gnu.org/cgit/emacs.git

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for read-only IMAP folder(s) and NNTP newsgroup(s).