|
From: | Ludwig Nussel |
Subject: | [bug-gv] [bug #30037] insecure creation of temporary file |
Date: | Wed, 02 Jun 2010 13:17:49 +0000 |
User-agent: | Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.1.9) Gecko/20100317 SUSE/3.5.9-0.1.1 Firefox/3.5.9 |
URL: <http://savannah.gnu.org/bugs/?30037> Summary: insecure creation of temporary file Project: GNU gv Submitted by: lnussel Submitted on: Mi 02 Jun 2010 13:17:48 GMT Category: PDF rendering Severity: 3 - Normal Item Group: None Status: None Privacy: Public Assigned to: None Open/Closed: Open Discussion Lock: Any Release: None _______________________________________________________ Details: when viewing pdf files gv instructs gs to write into a file in /tmp. gv does not make sure that the file gets created in a secure way though. gv should either not use /tmp for the storage or use mkstemp to actually create the file before calling gs. The issue was originally reported here: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316#10 _______________________________________________________ Reply to this item at: <http://savannah.gnu.org/bugs/?30037> _______________________________________________ Nachricht geschickt von/durch Savannah http://savannah.gnu.org/
[Prev in Thread] | Current Thread | [Next in Thread] |