in reply to Insecure temp file handling vulnerability in perl?

Change #22258, which was mostly integrated into 5.8.4, attempted to remove any code from modules and test/install code that insecurely created temporary files under /tmp.

This was a 'done on general principles' patch rather than addressing any specific vunerability. Ie a chap at openwall.com grepped the perl src code and modules for any reference to '/tmp' and and removed them where possible.

Dave.

  • Comment on Re: Insecure temp file handling vulnerability in perl?