FVWM: security problem in fvwm2

From: Paul Traina <pst_at_freefall.freebsd.org>
Date: Wed, 12 Jun 1996 22:57:15 -0700 (PDT)

The problem discussed here (originally found in 1.24r) is also in recent
versions of fvwm2 in the modules that do CPP or M4 processing of .fvwm2rc
files.

Since this is a generic problem, I'm notifying you guys of it in hopes that
you'll come up with a fix. I don't like the fix proposed by the author,
however it certainly works. I think a better fix would be to fork and
create pipes by hand and use mkstemp to hold temporary information and
avoid the race condition.

Paul
Received on Thu Jun 13 1996 - 01:01:36 BST