Bug 689324

Summary:	ps2epsi: insecure temp files
Product:	Ghostscript	Reporter:	Till Kamppeter <till.kamppeter>
Component:	General	Assignee:	Default assignee <ghostpdl-bugs>
Status:	NOTIFIED FIXED
Severity:	normal
Priority:	P4
Version:	master
Hardware:	All
OS:	All
URL:	http://www.cups.org/str.php?L1630
Customer:		Word Size:	---
Bug Depends on:
Bug Blocks:	689315
Attachments:	mktemp usage in pstoepsi

Description Till Kamppeter 2007-07-04 05:32:28 UTC

See

http://www.cups.org/str.php?L1630

---------------------------------------------------------------------------------
ps2epsi takes stuff from /tmp where it is could be manipulated.

more verbose description:
http://bugs.gentoo.org/128647
---------------------------------------------------------------------------------

Patch attached.

Comment 1 Till Kamppeter 2007-07-04 05:33:21 UTC

Created attachment 3143 [details]
mktemp usage in pstoepsi

Comment 2 Till Kamppeter 2007-07-04 05:35:07 UTC

The patch uses mktemp only if it exists. On systems without mktemp the old
method is used.

Comment 3 Till Kamppeter 2007-07-05 03:31:42 UTC

Fixed in SVN revision 8103.