commit acb672b6a179567632e032f547582f30fa2f4aa7
author Armin Ronacher <armin.ronacher@active-4.com> Fri Jan 10 10:40:51 2014 +0000
committer Armin Ronacher <armin.ronacher@active-4.com> Fri Jan 10 10:40:51 2014 +0000
tree 0d7c3a1e689e52602f03a7b3370af78d0cb7c69f
parent 701e9ada2b6968cf2bc41a3c1d4235922ce164f5

Fixed a security issue with temporary files on the filesystem cache on UNIX.

CHANGES

diff --git a/CHANGES b/CHANGES
index 6425de5..17e44ef 100644
--- a/CHANGES
+++ b/CHANGES
@@ -7,6 +7,11 @@
 
 - Prefix loader was not forwarding the locals properly to
   inner loaders.  This is now fixed.
+- Security issue: Changed the default folder for the filesystem cache to be
+  user specific and read and write protected on UNIX systems.  See `Debian bug
+  734747`_ for more information.
+
+.. _Debian bug 734747: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=734747
 
 Version 2.7.1
 -------------