Bug#740891: listadmin: insecure use of /tmp

tags 740891 + pending thanks The package has been uploaded to DELAYED (5 days).

Bug#740891: listadmin: insecure use of /tmp

tags 740891 + patch thanks I am proposing the following patch for this package: Index: listadmin-2.42/listadmin.pl === --- listadmin-2.42.orig/listadmin.pl +++ listadmin-2.42/listadmin.pl @@ -29,6 +29,7 @@ use strict; use English;

Bug#740891: listadmin: insecure use of /tmp

Package: listadmin Version: 2.40-4 Tags: security listadmin creates temporary files in an insecure way: # Use rand() to protect a little against tmpfile races $dumpfile ||= /tmp/dump- . rand() . -$list.html; if (open(DUMP, $dumpfile)) { chmod(0600,