Your message dated Fri, 16 Aug 2013 09:58:09 +0300
with message-id <87mwoi15ry....@picasso.cante.net>
and subject line Re: Bug#709282: resolved by the upload of 20110624-3?
has caused the Debian Bug report #709282,
regarding colortest: insecure use of temporary files
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact ow...@bugs.debian.org
immediately.)
--
709282: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=709282
Debian Bug Tracking System
Contact ow...@bugs.debian.org with problems
--- Begin Message ---
Package: colortest
Version: 20110624-1
Severity: serious
Tags: security
Justification: Policy 10.4
colortest-8 and colortest-16 create temporary files insecurely:
TMP=/tmp/xterm$$
eval '$CMD $OPT >$TMP || echo fail >$TMP' 2>/dev/null
--
Jakub Wilk
--- End Message ---
--- Begin Message ---
2013-08-12 06:07 tony mancill <tmanc...@debian.org>:
| Hi,
|
| Has the mktemp issue been resolved as of the latest upload to unstable?
| If so, I'd like to close this bug.
Closing, as it appears to no longer output error message[1]:
$ colortest-8
<color output>
Please reopen, if the problem persists,
Jari
[1] Output from: bash -x colortest-8
++ basename colortest-8
+ TMPBASE=/tmp/tmp.colortest-8.31567
+ ESC=$'\E'
+ CMD=echo
+ OPT=-n
+ SUF=
++ tmpfile
++ mktemp /tmp/tmp.colortest-8.31567.XXXXXX
+ TMP=/tmp/tmp.colortest-8.31567.FZmIyG
+ eval '$CMD $OPT >$TMP || echo fail >$TMP'
+ test '!' -f /tmp/tmp.colortest-8.31567.FZmIyG
+ test -s /tmp/tmp.colortest-8.31567.FZmIyG
+ trap atexit EXIT HUP INT TRAP TERM
...
+ atexit
+ echo ''
+ rm -f /tmp/tmp.colortest-8.31567.FZmIyG
<exit>
pgplBDilapdCp.pgp
Description: PGP signature
--- End Message ---
