Source: gnash Version: 0.8.8-5 Tags: security The configure script creates temporary files in an insecure way:
$ grep -A 7 '$$' gnash-0.8.8/configure cerr=/tmp/gnash-configure-errors.$$ cwarn=/tmp/gnash-configure-warnings.$$ crec=/tmp/gnash-configure-recommended.$$ echo "" #trap 'rm cerr' 0 # trap isn't a good idea, might override other traps exec 3> $cerr exec 4> $cwarn exec 5> $crec -- Jakub Wilk -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
