Bug#737778: CVE request: f2py insecure temporary file use

2014-02-07 Thread cve-assign
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 > Jakub Wilk reported insecure temporary file use in f2py. > > numpy/f2py/__init__.py contains this code: > > fname = os.path.join(tempfile.mktemp()+'.f') > > f = open(fname,'w') > > Can a CVE please be assigned if one hasn't been a

Bug#737778: CVE request: f2py insecure temporary file use

2014-02-05 Thread Murray McAllister
Hello, Jakub Wilk reported insecure temporary file use in f2py. From : "" numpy/f2py/__init__.py contains this code: from numpy.distutils.exec_command import exec_command import tempfile if source_fn is None: fna