Bug 21470

Summary:	CVE-2000-1137 ed uses mktemp + fopen for scratch files
Product:	[Retired] Red Hat Linux	Reporter:	Jarno Huuskonen <jarno.huuskonen>
Component:	ed	Assignee:	Karsten Hopp <karsten>
Status:	CLOSED ERRATA	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2	CC:	dr, lkundrak
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2000-11-29 15:22:52 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jarno Huuskonen 2000-11-29 08:15:50 UTC

Noticed from www.linuxtoday.com that debian has fixed ed.

Ed uses mktemp+fopen (buf.c:209) to create a temporary file.

Fix would be to use mkstemp+fdopen.

Comment 1 Josh Bressers 2007-01-23 19:14:43 UTC

*** Bug 223072 has been marked as a duplicate of this bug. ***

Comment 2 Josh Bressers 2007-01-23 19:27:09 UTC

*** Bug 223076 has been marked as a duplicate of this bug. ***