Bug 36237

Summary: Nedit uses tmpnam for temp files
Product: [Retired] Red Hat Powertools Reporter: Jarno Huuskonen <jarno.huuskonen>
Component: neditAssignee: Bernhard Rosenkraenzer <bero>
Status: CLOSED ERRATA QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 6.2Keywords: Security
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-04-17 10:52:49 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jarno Huuskonen 2001-04-17 10:52:45 UTC
Nedit uses tmpnam for creating temporary filenames. The file is then
opened with fopen --> tmprace

OpenBSD seems to have a patch for this (replace tmpnam/fopen with
mkstemp/fdopen)

Also I found this little info about from nedit mailinglist archive:
http://www.nedit.org/archives/develop/2001-Feb/0391.html

(Short summary: nedit's incremental save and backup files (.bck) are
created in cwd and nedit follows symlinks.)

Comment 1 Bernhard Rosenkraenzer 2001-05-08 12:39:35 UTC
Errata released.