Bug#764144: powermanga: Insecure temporary file /tmp/powermanga-log.txt

2014-10-06 Thread Salvatore Bonaccorso
Hi, On Mon, Oct 06, 2014 at 01:37:58PM +0200, Markus Koschany wrote: > Hence I think the severity should be downgraded and the bug report kept > open until it is no longer necessary to use a temporary file for writing > log messages. Agreed on downgrading the severity. Regards, Salvatore -- T

Bug#764144: powermanga: Insecure temporary file /tmp/powermanga-log.txt

2014-10-06 Thread Markus Koschany
Control: tags -1 moreinfo On 05.10.2014 21:03, Josh Triplett wrote: > Package: powermanga > Version: 0.93-1 > Severity: grave > Tags: security > > ~$ ln -s ~/arbitrary-file /tmp/powermanga-log.txt > ~$ ls -l /tmp/powermanga-log.txt > lrwxrwxrwx 1 josh josh 25 Oct 4 21:14 /tmp/powermanga-log.txt

Bug#764144: powermanga: Insecure temporary file /tmp/powermanga-log.txt

2014-10-05 Thread Josh Triplett
Package: powermanga Version: 0.93-1 Severity: grave Tags: security ~$ ln -s ~/arbitrary-file /tmp/powermanga-log.txt ~$ ls -l /tmp/powermanga-log.txt lrwxrwxrwx 1 josh josh 25 Oct 4 21:14 /tmp/powermanga-log.txt -> /home/josh/arbitrary-file ~$ powermanga (II) configuration filename: /home/josh/.