Bug#740670: perltidy: insecure permissions of temporary files

2014-03-03 Thread Don Armstrong
On Mon, 03 Mar 2014, Jakub Wilk wrote: > perltidy creates temporary files with default permissions, > potentially disclosing information that wouldn't be otherwise > accessible to local users. Temporary files should be always created > with mode 0600. Thanks for the report. This whole bit should p

Bug#740670: perltidy: insecure permissions of temporary files

2014-03-03 Thread Jakub Wilk
Package: perltidy Version: 20120701-1 Tags: security perltidy creates temporary files with default permissions, potentially disclosing information that wouldn't be otherwise accessible to local users. Temporary files should be always created with mode 0600. The vulnerable code is: sub make_t