Use mktemp for sfcbrepos instance migration temp file to prevent TOCTOU...

Brought to you by: blaschke-oss, buccella, hellerda

#118 Use mktemp for sfcbrepos instance migration temp file to prevent TOCTOU symlink attack via /tmp/sfcbinst.mof (CVE-2026-73584)

Milestone: backlog

Status: open

Owner: nobody

Labels: None

Priority: None

Category: Function

Updated: 2026-09-08

Created: 2026-09-08

Creator: Vitezslav Crhonek

Private: No

Proposed fix attached.

1 Attachments

sblim-sfcb-1.4.9-secure-tmpfile-upstream.patch

Discussion

Log in to post a comment.