CVE-2017-1000383

GNU Emacs version 25.3.1 and other versions most likely ignores umask when creating a backup save file "ORIGINALFILENAME" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the emacs binary...

CVE-2017-1000383

CVE-2017-1000383 affects GNU Emacs (notably version 25.3.1) and possibly other versions. The vulnerability stems from Emacs creating backup save files ("[ORIGINAL_FILENAME]~") without honoring the process umask, which can result in backup files being world-readable or otherwise exposed beyond the...