Hi,
The rcs2log that is distributed with XEmacs hasn't been
updated for a long time, and has a potential tmp file race
issue, which was fixed in Emacs 21.1 and cvs-1.11.2 in 2001.
It would be good if the copy shipped with XEmacs could also
be updated to fix this issue. I hear the issue appeared on
bugtraq last year apparently.
Below is a pointer to the Emacs changelog entry for
reference, though I guess it would probably be better just
to sync it with the master copy in Emacs.
http://savannah.gnu.org/cgi-bin/viewcvs/emacs/emacs/lib-src/rcs2log?only_...
Jens