paul.sz...@sydney.edu.au schrieb:
Sorry, but my ltrace or strace shows otherwise: gv does NOT use mkstemp,
gv does NOT open the file but gs does. (Thankfully gv seems to set a sane
"umask 077" before invoking gs.)
Well, that may be explained that debian lenny is shipped with a rather
old version of GNU gv.
As upstream maintainer, I did my test with an up to date verasion of GNU
gv (because that is what I need for the development of GNU gv).
The following commit contains the fix (you see it is rather old):
commit a17416c462e5b6c9cc7c98c5ea01f580152f2da9
Author: Markus Steinborn <gnugv_maintai...@yahoo.de>
Date: Sat Jul 19 16:21:35 2008 +0000
Use mkstemp for getting the temporary filename if available
Perhaps these changes may be packported by debian (if you know debian
stable you know about the changes that lenny will get an up to date GNU
gv, so backporting looks like the only option. ).
That patch applies to GNU gv 3.6.5 with some fuzz but well (except for
the update of the Changelog, but that should not be a problem).
If gv used mkstemp as you say, opening and pre-creating the file as I
suggested, then things would be "right".
Well, then I can close the bug upstream. But for debian, it has to be
kept open - as lenny is vulnerable.
Greetings
Markus Steinborn
GNU gv maintainer
--
To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
