[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug-gv] [bug #30037] insecure creation of temporary file

From: Ludwig Nussel
Subject: [bug-gv] [bug #30037] insecure creation of temporary file
Date: Wed, 02 Jun 2010 13:17:49 +0000
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; de; rv: Gecko/20100317 SUSE/3.5.9-0.1.1 Firefox/3.5.9


                 Summary: insecure creation of temporary file
                 Project: GNU gv
            Submitted by: lnussel
            Submitted on: Mi 02 Jun 2010 13:17:48 GMT
                Category: PDF rendering
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None



when viewing pdf files gv instructs gs to write into a file in /tmp. gv does
not make sure that the file gets created in a secure way though. gv should
either not use /tmp for the storage or use mkstemp to actually create the file
before calling gs. The issue was originally reported here:


Reply to this item at:


  Nachricht geschickt von/durch Savannah

reply via email to

[Prev in Thread] Current Thread [Next in Thread]