| 2009-01-24 05:01:42 |
Jamie Strandboge |
mktemp: statusexplanation |
This is at most a DoS, as mktemp safely creates the random file for us. In the case that an attacker has filled the drive with all possible combinations, mktemp will just fail to create the file, and scripts using mktemp should equally fail. If there are scripts that don't gracefully handle mktemp failing, bugs should be opened for those packages separately. |
This is in Jaunty now:
mktemp (1.5-9) unstable; urgency=high
* Upstream patch to remove pid from name generation. closes: #495193.
|
|
