[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-Id: <201406130609.s5D69CZL017332@linus.mitre.org>
Date: Fri, 13 Jun 2014 02:09:12 -0400 (EDT)
From: cve-assign@...re.org
To: carnil@...ian.org
Cc: cve-assign@...re.org, oss-security@...ts.openwall.com
Subject: Re: CVE request: scheme48: insecure use of temporary files in cmuscheme48.el
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
> the function scheme48-send-definition in cmuscheme48.el of scheme48
> - (let ((loser "/tmp/s48lose.tmp"))
> + (let ((loser (make-temp-file "s48lose")))
Use CVE-2014-4150.
- --
CVE assignment team, MITRE CVE Numbering Authority
M/S M300
202 Burlington Road, Bedford, MA 01730 USA
[ PGP key available through http://cve.mitre.org/cve/request_id.html ]
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (SunOS)
iQEcBAEBAgAGBQJTmpUUAAoJEKllVAevmvmsER8H/0rPq540dytUAvI0leAqO9ko
udJF6/hAosUiJYiRS7AbAgNc12z5ZiTknOucMMs30IarTMNdOayS8n+dwP6D3yQn
LISuAmUt4qYoFj47ZnARUbavHtA6YCtnTBxxV9eM98k4+6TebkjuW/seHArnaM/P
WW7X332aN0hNNPlO3XnEf+KBLIQluySTxzFb3uv+oBHinDmT0ZTVMsWQ6IobQUti
WtEf5r3O0OhPJfHEg6mg2i8TfWWDCNXP5YaIlwNz3kSrH9Fz4BCTrzHcEf4kwSF6
9ddvQWu8DHOTmdOrDgKVsaYzvWyK9fQW3q7WLQox21vIRj8WADNxvuZwwsFhkTU=
=on1k
-----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
