tags 496438 security confirmed thanks Hi,
There are indeed several occurances of insecure tempfile usage:
15: ${EXTRA_AREC_OPT} ${1} |tee /tmp/v-recorder${2}-out
&>/dev/tty$[${2}+1]
18: ${EXTRA_AREC_OPT} ${1} |tee /tmp/v-recorder${2}-out
&>/dev/ttyv$[${2}+1]
33: ${EXTRA_DREC_OPT} ${1} |tee /tmp/v-recorder${2}-out
&>/dev/tty$[${2}+1]
36: ${EXTRA_DREC_OPT} ${1} |tee /tmp/v-recorder${2}-out
&>/dev/ttyv$[${2}+1]
As the package looks otherwise unmaintained and there are many alternatives
available, I'm filing a removal bug instead of attempting to fix this. So I
believe it may also be removed from testing.
cheers,
Thijs
pgppMXslMbHXM.pgp
Description: PGP signature
