Re: [cdesktopenv-devel] security fix for dtappintegrate

2013-07-22 Thread Jon Trulson
On Tue, 23 Jul 2013, Pascal Stumpf wrote: > see patch. > I applied this, and the previous 11 patches. I have not build tested yet. Thanks! -- Jon Trulson "I was not genomed to alter reality." - Sonmi 451 -

[cdesktopenv-devel] security fix for dtappintegrate

2013-07-22 Thread Pascal Stumpf
see patch. >From 30cf6ace3e74a135dd98f8dcbcad70b6f605edb7 Mon Sep 17 00:00:00 2001 From: Pascal Stumpf Date: Tue, 23 Jul 2013 00:59:23 +0200 Subject: [PATCH] SECURITY fix for dtappintegrate: Use mktemp(1) to generate a template. Using a fixed filename in /tmp is just begging for a symlink attack