oss-security - Re: CVE request: hplip: insecure tmp file handling

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <554744119.1604900.1311710729310.JavaMail.root@zmail01.collab.prod.int.phx2.redhat.com>
Date: Tue, 26 Jul 2011 16:05:29 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE request: hplip: insecure tmp file handling

Please use CVE-2011-2722.

Thanks.

-- 
    JB

----- Original Message -----
> Hi,
> 
> hplip has a tmp file issue:
> 
> https://bugzilla.novell.com/show_bug.cgi?id=704608
> https://bugs.launchpad.net/hplip/+bug/809904
> 
> Could someone possibly assign a CVE to it, please? Thanks in advance!
> 
> Matthias
> 
> PS: Not too critical IMO as the code path is probably rarely used
> anyway.
> 
> --
> Matthias Weckbecker, Junior Software Engineer, SUSE Security Team
> SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
> Tel: +49-911-74053-0; http://suse.com/
> SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.