sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability

From: bugzilla-daemon AT metalab.unc.edu
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability
Date: Mon, 18 Oct 2004 11:50:14 -0400

http://bugs.sourcemage.org/show_bug.cgi?id=7530

seth AT tautology.org changed:

What |Removed |Added
----------------------------------------------------------------------------
CC| |acedit AT armory.com

------- Additional Comments From seth AT tautology.org 2004-10-18 11:50 -------
Thanks for reporting this, we must have missed it in the last "fix kyle's bad
/tmp code" run.

I presume this is a good candidate for placing in /tmp/sorcery/ like most of
the
other tmp variables, Andrew (added to CC)?

Sorry for the long wait for reply, I didn't have access to the computer all
weekend.

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability, bugzilla-daemon, 10/18/2004
- <Possible follow-up(s)>
- [SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability, bugzilla-daemon, 10/18/2004
- [SM-Security] [Bug 7530] [sorcery/installwatch] insecure tmp file handling vulnerability, bugzilla-daemon, 10/19/2004