textutils (Re: Owl packages with dangerous "tmp" functions)

[Solar Designer]

> textutils only has a DoS in tac, trivial to fix (will do unless
> someone posts a patch earlier).

The attached patch against textutils-2.0.11 avoids the DoS attacks on
tac and sort.

I am using mkstemp(3), which is not available on all of the supported
platforms.  A configure check and a portable mkstemp substitute (such
as one found in libiberty included with binutils and gcc) should be
added when fixing this in the official textutils.  This patch, in its
current form, is for use in security updates the Linux distribution
vendors are planning.

-- 
/sd

textutils-2.0.11-owl-tmp.diff
Description: Text document