[Secure-testing-team] Bug#605419: gnash: configure creates temp files insecurely
Jakub Wilk
jwilk at debian.org
Mon Nov 29 20:06:06 UTC 2010
Source: gnash
Version: 0.8.8-5
Tags: security
The configure script creates temporary files in an insecure way:
$ grep -A 7 '$$' gnash-0.8.8/configure
cerr=/tmp/gnash-configure-errors.$$
cwarn=/tmp/gnash-configure-warnings.$$
crec=/tmp/gnash-configure-recommended.$$
echo ""
#trap 'rm cerr' 0 # trap isn't a good idea, might override other traps
exec 3> $cerr
exec 4> $cwarn
exec 5> $crec
--
Jakub Wilk
More information about the Secure-testing-team
mailing list