[bug-gv] [bug #30037] insecure creation of temporary file

[Markus Steinborn]

Update of bug #30037 (project gv):

                Category:           PDF rendering => Sources configuration  

    _______________________________________________________

Follow-up Comment #2:

Thank you for the bug report. I'm already working on this problem - see the
debian bug report you linked and also see the public bug-gv archives.

If you are interested (your suse.de makes me believe so), you can get the
development version from git. It will use mkstemp and invoke ghostscript from
a safe directory.

Currently one feature is still missing: If the safe direcory does not exist,
mkdtemp should be used to create one in /tmp. But this is not done yet.

Expect a fixed release quite soon. As the new changes aren't tested on non
GNU/linux systems and translatiosn are still missing (from GNU gv 3.6.90 it
supports being translated!), it will be released on ftp://alpa.gnu.org. Anyway
we believe it will be stable.


    _______________________________________________________

Reply to this item at:

  <http://savannah.gnu.org/bugs/?30037>

_______________________________________________
  Nachricht geschickt von/durch Savannah
  http://savannah.gnu.org/