On 05/27/13 02:19, Andreas Färber wrote:
> Am 27.05.2013 02:11, schrieb Laszlo Ersek:
>> Do you plan to backport
>>
>> 8fe6bbc qga: distinguish binary modes in "guest_file_open_modes" map
>> 2b72001 qga: unlink just created guest-file if fchmod() or fdopen()
>> fails on it
>>
>> too? These are considered polish for the CVE fix.
>
> I did backport both to openSUSE 12.2 - they apply without conflicts. :)
> I mainly posted this one to check if there are better QERRs to use.
I think your choices were apt.
>> Also, a side-note: existing world-writable log files etc. are not
>> recreated nor have their modes changed, so maybe a release note or some
>> such would be useful for admins ("delete your previous logfile &
>> optional unix domain socket, or change their modes manually").
>
> Feel free to add a note to the 1.5 Release Notes - it can then be copied
> to the previous releases we backport this fix to.
Do you mean in the wiki? I'll need an account first :)
Thanks,
Laszlo
