Bug 166673 - CAN-2005-2672 lm_sensors pwmconfig insecure temporary file usage
Summary: CAN-2005-2672 lm_sensors pwmconfig insecure temporary file usage
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: Fedora
Classification: Fedora
Component: lm_sensors
Version: 4
Hardware: All
OS: Linux
medium
low
Target Milestone: ---
Assignee: Phil Knirsch
QA Contact: David Lawrence
URL:
Whiteboard: impact=low,reported=20050824,public=2...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2005-08-24 15:16 UTC by Josh Bressers
Modified: 2015-03-05 01:15 UTC (History)
1 user (show)

Fixed In Version: FC5
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2006-09-22 02:12:34 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)

Description Josh Bressers 2005-08-24 15:16:08 UTC 
+++ This bug was initially created as a clone of Bug #166672 +++

A bug was found in lm_sensors' pwmconfig tool which uses temporary files in an
insecure manner.

-- Additional comment from bressers on 2005-08-24 11:13 EST --
Created an attachment (id=118071)
Upstream patch from CVS

This issue should also affect FC3
Comment 1 Phil Knirsch 2005-09-01 17:38:11 UTC 
Fixed in development version, other releases will follow soon.

Read ya, Phil
Comment 3 Dimitris 2005-11-07 09:21:16 UTC 
Are there plans to release a new lm_sensors package? FC4 comes with version
2.8.8 which is nearly a year old. I think the current CVS release is 2.9.3.

Thank you.
Comment 4 Bill Nottingham 2006-09-22 02:12:34 UTC 
Closing bugs in MODIFIED state from prior Fedora releases. If this bug persists
in a current Fedora release (such as Fedora Core 5 or later), please reopen and
set the version appropriately.
Note You need to log in before you can comment on or make changes to this bug.