Red Hat Bugzilla – Bug 182286
CVE-2003-1294 xscreensaver temporary file flaws
Last modified: 2012-06-20 09:24:42 EDT
Stan Bubrouski contacted jwz the maintainer of xscreensaver
and cc'd Red Hat security folks on 20031031 to report an
insecure temporary file flaw introduced in xscreensaver
version 4.14. This was due to a bit of debugging code that
got left in by mistake, it was removed in 4.15, and therefore
didn't affect any RHEL releases. This was CVE-2003-0885.
However SUSE then found some other suspect temporary file issues which also got
silently fixed in 4.15 release. I've applied for a CVE name for these.
Created attachment 124968 [details]
Proposed patch as used by SUSE
Thank you for submitting this issue for consideration in Red Hat Enterprise Linux. The release for which you requested us to review is now End of Life.
Please See https://access.redhat.com/support/policy/updates/errata/
If you would like Red Hat to re-consider your feature request for an active release, please re-open the request via appropriate support channels and provide additional supporting details about the importance of this issue.