[Python-Dev] Re: Python execvpe symlink race condition

Guido van Rossum guido@python.org
Sun, 16 Feb 2003 14:26:56 -0500


Dear submitter,

Thanks for your vulnerability report.

The vulnerability you reported has already been fixed in Python 2.2.2,
released on October 14, 2002.  As of that version, os.execvpe() no
longer calls mktemp().

--Guido van Rossum (home page: http://www.python.org/~guido/)