COMMAND

    rcs2log

SYSTEMS AFFECTED

    Emacs

PROBLEM

    Morten  Welinder  found  following.   rcs2log  uses  files in /tmp
    insecurely.  This  was reported to  the Emacs maintainers  an aeon
    or two ago.  There seem to be quite a few sources for rcs2log  out
    there.   A  SuSE  6.3  (guess)  seems  to  install three different
    versions in four different spots.

        xyz:~> ls -l `locate rcs2log`
        -rwxr-xr-x   1 root     root        17927 Nov  8  1999 /usr/bin/rcs2log
        -rwxr-xr-x   1 root     root        17927 Nov  8  1999 /usr/lib/cvs/contrib/rcs2log
        -rwxr-xr-x   1 root     root        17902 Nov  8  1999 /usr/lib/emacs/20.4/i386-suse-linux/rcs2log
        -rwxr-xr-x   1 root     root        17357 Feb  8  2001 /usr/lib/xemacs/21.1.10/i386-suse-linux/rcs2log

SOLUTION

    Current preleases have a fix.