Date:	Mon, 12 Oct 1998 02:45:20 -0500
From:	Miguel de Icaza <miguel@NUCLECU.UNAM.MX>
Subject:      Re: [root@DEATH.GDS.RO: ]
To:	BUGTRAQ@NETSPACE.ORG

> Whooops, can you confirm this?
>
> Regards,
>
>         Joey
>
> > mc 4.5.0 creates a temporary file in /tmp when it's started.
> > It's called talk.fish and has the mode 644. If a user would link the
> > file to /etc/passwd or anything else, when the root would start mc, the
> > file would be erased.

This is correct 4.5.0 had this bug.  It is fixed in CVS and fixed on
the just released 4.5.1 version available in:

    ftp://ftp.nuclecu.unam.mx/linux/local/devel

md5sum:
51ae681925f9d2b57323526545c93a36  mc-4.5.1.tar.gz
78f9d190d9e5688ac3775f8d825b106b  patch-5.1.gz

Please note as that versions 4.5.xx of Midnight Commander are
development version of Midnight Commander, so they should not be part
of an OS distribution.  The stable version is version 4.1.36.

Users of 4.5.0 are urged to upgrade to 4.5.1

best wishes,
Miguel.