[Secure-testing-team] Bug#605419: gnash: configure creates temp files insecurely

Jakub Wilk jwilk at debian.org
Mon Nov 29 20:06:06 UTC 2010


Source: gnash
Version: 0.8.8-5
Tags: security

The configure script creates temporary files in an insecure way:

$ grep -A 7 '$$' gnash-0.8.8/configure
cerr=/tmp/gnash-configure-errors.$$
cwarn=/tmp/gnash-configure-warnings.$$
crec=/tmp/gnash-configure-recommended.$$
echo ""

#trap 'rm cerr' 0 # trap isn't a good idea, might override other traps
exec 3> $cerr
exec 4> $cwarn
exec 5> $crec


-- 
Jakub Wilk





More information about the Secure-testing-team mailing list