oss-security - CVE request: scheme48: insecure use of temporary files in cmuscheme48.el

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20140613045336.GA18171@lorien.valinor.li>
Date: Fri, 13 Jun 2014 06:53:36 +0200
From: Salvatore Bonaccorso <carnil@...ian.org>
To: oss-security@...ts.openwall.com
Cc: cve-assign@...re.org
Subject: CVE request: scheme48: insecure use of temporary files in
 cmuscheme48.el

Hi,

Steve Kemp discovered that the function scheme48-send-definition in
cmuscheme48.el of scheme48 insecurely use temorary files[0]. This was
addressed upstream in commit [1]. Could a CVE be assigned for this
issue?

 [0] http://bugs.debian.org/748766
 [1] http://www.s48.org/cgi-bin/hgwebdir.cgi/s48/rev/a44624256297

Regards,
Salvatore

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.