Bug#675348: jpegoptim: Possible temporary file security issue.

2013-01-31 Thread A. N. Other
On Wed, Jan 30, 2013 at 10:54 AM, Timo Kokkonen wrote: > This has now been patched in latest jpegoptim (see > https://github.com/tjko/jpegoptim). > Next jpegoptim release (1.2.5) will use mkstemps() if its available on the > target platform. Thanks for your email. This change would fix the issue

Bug#675348: jpegoptim: Possible temporary file security issue.

2013-01-30 Thread Timo Kokkonen
Hi, This has now been patched in latest jpegoptim (see https://github.com/tjko/jpegoptim). Next jpegoptim release (1.2.5) will use mkstemps() if its available on the target platform. Thanks, Timo On Thu, May 31, 2012 at 5:04 AM, A. N. Other wrote: > Package: jpegoptim > Version: 1.2.3-2 > Sev

Bug#675348: jpegoptim: Possible temporary file security issue.

2012-05-31 Thread A. N. Other
Package: jpegoptim Version: 1.2.3-2 Severity: important Tags: patch, security X-Debbugs-Cc: t...@iki.fi (cc-ing Debian BTS report to jpegoptim upstream) For each image that it processes, jpegoptim currently creates a temporary file {destdir}/jpegoptim-{uid}-{pid}.tmp, where {destdir} is either th