Bug 30564

Summary:	hplip: Insecure temporary files (2.4)
Product:	UCS	Reporter:	Moritz Muehlenhoff <jmm>
Component:	Security updates	Assignee:	Security maintainers <security-maintainers>
Status:	CLOSED WORKSFORME	QA Contact:
Severity:	normal
Priority:	P4
Version:	UCS 3.0
Target Milestone:	UCS 2.4-secX
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Moritz Muehlenhoff

2013-02-22 15:19:04 CET

CVE-2013-0200

hplip handles temporary files insecurely in several code paths

Comment 1 Moritz Muehlenhoff

2013-05-21 13:12:29 CEST

(In reply to comment #0)
> CVE-2013-0200
> 
> hplip handles temporary files insecurely in several code paths

The vulnerable code isn't present yet in the UCS 2.4 package.