Bug#431600: amaya: Insecure use of temporary files allows arbitary file trunaction/creation

2007-07-11 Thread Regis Boudin
Hi Steve, I forwarded it upstream who "fixed" it with the new 9.55 release. Given the progress made with their fix, I will have to work on a proper one... Many thanks for the report. Regis On Tue, July 3, 2007 19:42, Steve Kemp wrote: > Package: amaya > Version: 9.54~dfsg.0-1 > Severity: import

Bug#431600: amaya: Insecure use of temporary files allows arbitary file trunaction/creation

2007-07-03 Thread Steve Kemp
Package: amaya Version: 9.54~dfsg.0-1 Severity: important The Amaya package contains the following code inside amaya-9.51/Amaya/thotlib/unicode/ustring.c { int fd; char buffer[256]; memset ( buffer, 0, 256 ); /* ask the system using locale com