Re: Bug#654116: RFH: screen -- terminal multiplexor with VT100/ANSI terminal emulation
On Tue, Jan 3, 2012 at 18:05:22 +0100, Romain Francoise wrote:
> Jakub Wilk <jwilk@debian.org> writes:
>
> > Also, you just introduced a security hole: every user can DoS other one
> > (including root) my mkdiring /tmp/tmux-${VICTIM_UID}.
>
> See #620304 (and CVE-2011-1496) for more context about this.
>
That doesn't say anything about using /tmp, just that the patch you used
before was broken?
Cheers,
Julien
Reply to: