Bug#775461: python-wxgtk3.0: wx.tools.img2py: insecure use of /tmp

2015-01-21 Thread Jakub Wilk
Hi Olly! * Olly Betts , 2015-01-21, 10:48: I've come up with a patch (attached), but I'm not really a Python programmer, so I'd appreciate a review to make sure I'm not doing something dumb. I'm busy, so I had only a quick look at the patch: -xmltemp = tempfile.mktemp('.

Bug#775461: python-wxgtk3.0: wx.tools.img2py: insecure use of /tmp

2015-01-20 Thread Olly Betts
On Thu, Jan 15, 2015 at 10:35:39PM +0100, Jakub Wilk wrote: > This is how wx.tools.img2py uses temporary files (with boring parts > snipped): > >tfname = tempfile.mktemp() >try: >ok, msg = convert(image_file, maskClr, None, tfname, > wx.BITMAP_TYPE_PNG, ".png") ># ... >

Bug#775461: python-wxgtk3.0: wx.tools.img2py: insecure use of /tmp

2015-01-15 Thread Jakub Wilk
Package: python-wxgtk3.0 Version: 3.0.1.1+dfsg-2 Tags: security This is how wx.tools.img2py uses temporary files (with boring parts snipped): tfname = tempfile.mktemp() try: ok, msg = convert(image_file, maskClr, None, tfname, wx.BITMAP_TYPE_PNG, ".png") # ... finally: