Ubuntu Security Notice 919-1 - Dan Rosenberg discovered that the email helper in Emacs did not correctly check file permissions. A local attacker could perform a symlink race to read or append to another user's mailbox if it was stored under a group-writable group-"mail" directory.
c16d9a06cf865b85e75b47ee6aaea763de817d1884db165e3a02730f2585896c