The attached patch solves the problem in a better way:
It replaces all asserts with "if ...: raise AssertionError"
constructions. It needs also testing.
diff -Nru offlineimap-6.2.0.2/offlineimap/folder/Gmail.py offlineimap-6.2.0.3/offlineimap/folder/Gmail.py
--- offlineimap-6.2.0.2/offlineimap/fold
Hi!
At the moment, the lock file usage in winkeydaemon is useless since
there is never a test if the lock file does exist.
In my opinion, the vulnerability should be solved by using routines from
LockFile::Simple (package liblockfile-simple-perl) and creating the
files directly in /tmp/.
--
2 matches
Mail list logo
