Re: CVE id request: mktemp

["Todd C. Miller" <Todd.Miller () courtesan com>]

In message <20080818085956.GB29717 () suse de>
        so spake Sebastian Krahmer (krahmer):

> BTW, mktemp(1) is using O_EXCL anyway, so I dont see
> an issue. Additionally all of our scripts use
> more than 6 X' as also shown in the
> example section of the manpage. We are not going to
> release updates for this non-issue.

I don't think it is a security issue either.  Vendors can also just
configure mktemp with the --with-libc flag to use the libc
mkstemp()/mkdtemp() functions instead of the bundled version if
they prefer.

 - todd