Bug#775199: smime_keys: insecure use of /tmp

2015-05-15 Thread Kevin J. McCarthy
Thank you for the suggestion to use File::Temp. This should be fixed upstream in http://dev.mutt.org/hg/mutt/rev/babc30377614 -Kevin -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Bug#775199: smime_keys: insecure use of /tmp

2015-01-12 Thread Jakub Wilk
Package: mutt Version: 1.5.23-3 Tags: security This is how smime_keys creates temporary files: my $file = sprintf( '/tmp/smime-%d.%d', $$, int(rand( 99 ) ) ); print STDERR "TMPFILE: $file\n"; if ( -e $file ) { die( "ERROR: TMPFILE $file existss?!?!" );