Source: gnash Version: 0.8.8-5 Tags: security The configure script creates temporary files in an insecure way:
$ grep -A 7 '$$' gnash-0.8.8/configure cerr=/tmp/gnash-configure-errors.$$ cwarn=/tmp/gnash-configure-warnings.$$ crec=/tmp/gnash-configure-recommended.$$ echo "" #trap 'rm cerr' 0 # trap isn't a good idea, might override other traps exec 3> $cerr exec 4> $cwarn exec 5> $crec -- Jakub Wilk -- To UNSUBSCRIBE, email to [email protected] with a subject of "unsubscribe". Trouble? Contact [email protected]
