The patch is a backport from upstream trunk (2.3.x).
The correct fix would be to use apr_file_open() with APR_OS_DEFAULT permissions instead of apr_file_mktemp() to create the temp file. Unfortunately, I don't think I will have time to fix it in the next week or so.
The patch is a backport from upstream trunk (2.3.x).
The correct fix would be to use apr_file_open() with APR_OS_DEFAULT permissions instead of apr_file_mktemp() to create the temp file. Unfortunately, I don't think I will have time to fix it in the next week or so.