[Bug 751886] CVE-2011-4115 perl-Parallel-ForkManager: insecure temporary file usage

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug.


https://bugzilla.redhat.com/show_bug.cgi?id=751886

--- Comment #4 from Jason Tibbitts <tibbs@xxxxxxxxxxx> 2011-11-10 13:11:51 EST ---
I like the idea of making tempdir mandatory.  It conveniently both shows us if
any consuming code would have the security issue and pushes responsibility for
that bit of security elsewhere.  Let me whip something up.

I believe the maintainers of the packages which depend on Parallel::ForkManager
are CC'd on this ticket already; could either of you check to see if your
packages would have issues with this or if they even use the problematic
feature?

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.
--
Fedora Extras Perl SIG
http://www.fedoraproject.org/wiki/Extras/SIGs/Perl
perl-devel mailing list
perl-devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/perl-devel



[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Legacy Announce]     [Fedora PHP Devel]     [Kernel Devel]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite Information]
  Powered by Linux