Re: CVE request: ghostscript and gv

[Josh Bressers <bressers () redhat com>]

----- "Michael Gilbert" <michael.s.gilbert () gmail com> wrote:

> > > In the Debian bug report Paul also mentiones that gv creates a
> > > temporary file in an insecure way:
> > > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=583316#10
>
> should the insecure temp file get its own id since it is rather
> different than the original problem?

Sigh, yes. I need to read the whole mail next time :(

So to recap:

CVE-2010-2055 ghostscript and gv unsafe CWD init file usage
CVE-2010-2056 ghostscript insecure /tmp use

-- 
    JB