GNU bug report logs - #17415
insecure temp file in tramp-uudecode

Previous Next

Package: emacs;

Reported by: Glenn Morris <rgm <at> gnu.org>

Date: Tue, 6 May 2014 04:01:02 UTC

Severity: important

Tags: security

Found in version 24.3.90

Fixed in version 24.4

Done: Michael Albinus <michael.albinus <at> gmx.de>

Bug is archived. No further changes may be made.

Full log

Message #3 received at submit <at> debbugs.gnu.org (full text, mbox):

From: Glenn Morris <rgm <at> gnu.org>
To: submit <at> debbugs.gnu.org
Subject: insecure temp file in tramp-uudecode
Date: Tue, 06 May 2014 00:00:06 -0400

Package: emacs
Version: 24.3.90
Severity: important
Tags: security

http://bugs.debian.org/747100 points out that tramp-uudecode (now defined
tramp-sh.el) uses a predictable temp-file name.
This bug report was last modified 11 years and 112 days ago.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.