Subject: Bug#878138: muttprint: still vulnerable to symlink attack (race condition)

From: Vincent Lefevre <[email-masked]>
Date: Tue, 10 Oct 2017 14:16:28 +0200

On 2017-10-10 13:58:16 +0200, Moritz Muehlenhoff wrote:
> This is neutralised by kernel hardening starting with stretch, see release notes:
> https://www.debian.org/releases/jessie/amd64/release-notes/ch-whats-new.en.html#security

which is there just because of this kind of bugs.

Note also that this is still an optional feature, and not all users
use Debian provided kernels.

-- 
Vincent Lefèvre <[email-masked]> - Web: <https://www.vinc17.net/>
100% accessible validated (X)HTML - Blog: <https://www.vinc17.net/blog/>
Work: CR INRIA - computer arithmetic / AriC project (LIP, ENS-Lyon)