You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
gentoo-overlay/dev-perl/Clipboard/files/Clipboard-0.130.0-insecure-...

24 lines
655 B

Description: Fix insecure use of temporary files.
This is CVE-2014-5509.
Origin: vendor
Bug: https://rt.cpan.org/Public/Bug/Display.html?id=98435
Forwarded: https://rt.cpan.org/Public/Bug/Display.html?id=98435
Author: gregor herrmann <gregoa@debian.org>
Last-Update: 2016-08-13
--- a/scripts/clipedit
+++ b/scripts/clipedit
@@ -1,10 +1,11 @@
#!/usr/bin/perl
use strict;
use Clipboard;
+use File::Temp qw( tempfile );
my $orig = Clipboard->paste;
-my $tmpfilename = "/tmp/clipedit$$";
+my ($tmpfile, $tmpfilename) = tempfile();
open my $tmpfile, ">$tmpfilename" or die "Failure to open $tmpfilename: $!";
print $tmpfile $orig;
close $tmpfile;