bug-gv
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[bug-gv] [bug #30037] insecure creation of temporary file


From: Ludwig Nussel
Subject: [bug-gv] [bug #30037] insecure creation of temporary file
Date: Wed, 02 Jun 2010 13:17:49 +0000
User-agent: Mozilla/5.0 (X11; U; Linux x86_64; de; rv:1.9.1.9) Gecko/20100317 SUSE/3.5.9-0.1.1 Firefox/3.5.9

URL:
  <http://savannah.gnu.org/bugs/?30037>

                 Summary: insecure creation of temporary file
                 Project: GNU gv
            Submitted by: lnussel
            Submitted on: Mi 02 Jun 2010 13:17:48 GMT
                Category: PDF rendering
                Severity: 3 - Normal
              Item Group: None
                  Status: None
                 Privacy: Public
             Assigned to: None
             Open/Closed: Open
         Discussion Lock: Any
                 Release: None

    _______________________________________________________

Details:

when viewing pdf files gv instructs gs to write into a file in /tmp. gv does
not make sure that the file gets created in a secure way though. gv should
either not use /tmp for the storage or use mkstemp to actually create the file
before calling gs. The issue was originally reported here:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316#10




    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?30037>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.gnu.org/




reply via email to

[Prev in Thread] Current Thread [Next in Thread]