Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS

To: antonio@xxxxxxxx, me@xxxxxxxx, grobian@xxxxxxxxxx
Subject: Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
From: Mutt <fleas@xxxxxxxx>
Date: Fri, 06 Aug 2010 20:14:22 -0000
Auto-submitted: auto-generated
Cc: mutt-dev@xxxxxxxx
In-reply-to: <048.570b9bbe3d009a0d105c88d6bfc7da93@xxxxxxxx>
List-post: <mailto:mutt-dev@mutt.org>
List-unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-dev"
Mail-followup-to: fleas@xxxxxxxx
References: <048.570b9bbe3d009a0d105c88d6bfc7da93@xxxxxxxx>
Reply-to: fleas@xxxxxxxx
Sender: owner-mutt-dev@xxxxxxxx

#3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
-------------------------------+--------------------------------------------
  Reporter:  antonio@â         |       Owner:  mutt-dev
      Type:  defect            |      Status:  closed  
  Priority:  minor             |   Milestone:          
 Component:  mutt              |     Version:  1.5.20  
Resolution:  fixed             |    Keywords:  patch   
-------------------------------+--------------------------------------------
Changes (by Michael Elkins <me@â>):

  * status:  new => closed
  * resolution:  => fixed


Comment:

 (In [998ca956b41b]) use a 64-bit random value in temporary filenames.

 closes #3158

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3158#comment:4>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

References:
- [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
  - From: Mutt

Prev by Date: Re: opensolaris build break
Next by Date: Re: [PATCH] Drop declaration for unused argv/argc parameters
Previous by thread: Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
Next by thread: [Mutt] #3159: Changing attachment type not possible for multiple attachments at once
Index(es):
- Date
- Thread