On Wed, Jan 30, 2013 at 10:54 AM, Timo Kokkonen <t...@iki.fi> wrote:
> This has now been patched in latest jpegoptim (see
> https://github.com/tjko/jpegoptim).
> Next jpegoptim release (1.2.5) will use mkstemps() if its available on the
> target platform.

Thanks for your email. This change would fix the issue in Debian.
Note however that mkstemp() is standardized (in 4.3BSD, POSIX [1]) while
mkstemps() is "unstandardized, but appears on several other systems"
(according to the linux manpage). Thus if you want the greatest number of
systems to handle tempfiles securely, you might be better off using
mkstemp() as in my original patch.

[1] http://pubs.opengroup.org/onlinepubs/9699919799/functions/mkstemp.html


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to