Bug#808730: stalin: Insecure use of temporary files

2015-12-27 Thread Salvatore Bonaccorso
Hi Steve, On Tue, Dec 22, 2015 at 10:38:54AM +, Steve Kemp wrote: > > Package: stalin > Version: 0.11-5 > Severity: critical > Tags: security > > > When `stalin` launches it attempts to detect its environment via > the following code in /usr/lib/stalin/QobiScheme.sc: > > > (system

Bug#808730: stalin: Insecure use of temporary files

2015-12-23 Thread Rob Browning
Steve Kemp writes: > Package: stalin > Version: 0.11-5 > Severity: critical > Tags: security > > > When `stalin` launches it attempts to detect its environment via > the following code in /usr/lib/stalin/QobiScheme.sc: > > > (system "uname -m >/tmp/QobiScheme.tmp") > ... > (system

Bug#808730: stalin: Insecure use of temporary files

2015-12-22 Thread Rob Browning
Steve Kemp writes: > Package: stalin > Version: 0.11-5 > Severity: critical > Tags: security > > > When `stalin` launches it attempts to detect its environment via > the following code in /usr/lib/stalin/QobiScheme.sc: > > > (system "uname -m >/tmp/QobiScheme.tmp") > ... > (system

Bug#808730: stalin: Insecure use of temporary files

2015-12-22 Thread Steve Kemp
Package: stalin Version: 0.11-5 Severity: critical Tags: security When `stalin` launches it attempts to detect its environment via the following code in /usr/lib/stalin/QobiScheme.sc: (system "uname -m >/tmp/QobiScheme.tmp") ... (system "rm -f /tmp/QobiScheme.tmp")) This is a p