Re: flexfax: Securityfix for /tmp racecondition

[Nico Kadel-Garcia <raoul@cirl.meei.harvard.edu>]

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 24 Sep 1998, Carsten Hoeger wrote:

> On Wed, Sep 23, Carsten Hoeger wrote:
> 
> > A fixed, precompiled package can be found at
> >   ftp://ftp.suse.de/pub/suse_update/suse53/n1/hylafax.rpm
> 
> Sorry, that was not my day... :-(
> 
> The correct URL is:
> 
> ftp://ftp.suse.com/pub/suse_update/suse53/n1/hylafax.rpm
>                ^^^

Carsten, since such a race condition could also affect other UNIX
systems, do you have the patch in hand and could you publish it
for the rest of us? Or repost the original message from someone
else that got mentioned, if it included a patch? I'd like to *review*
such a security patch before I recommend it....

			Nico Kadel-Garcia
			Senior Engineer, CIRL 
			Mass. Eye and Ear Infirmary
			raoul@cirl.meei.harvard.edu

-----BEGIN PGP SIGNATURE-----
Version: 2.6.2

iQCVAwUBNgvE1T/+ItycgIJRAQGO9QP/fiALcpXQFcuaMQt6SKvLyu+5iLRh8OYb
XhepYmYou3yyqzd/tGgfnLjqKzbWH39Xp9XLBUwzmvhfL/Waun9p5hGD0OgtJWbD
2RZZxN7IgEIbubSeANXGw3H08nW1HjfzeuoQMIskjEoIhATTBS26L2x6RgXcaHtp
SbYDzVUrZko=
=0rtS
-----END PGP SIGNATURE-----