Date: Sun, 07 Sep 2014 20:49:47 -0600 From: Kurt Seifried <kseifried@...hat.com> To: "oss-security@...ts.openwall.com" <oss-security@...ts.openwall.com> Subject: Python robotframework - tmp vuln This is the first of many, only looking at programs with >5000 downloads in the last month. https://pypi.python.org/pypi/robotframework-pabot/ robotframework-pabot-0.8/pabot/result_merger.py if __name__ == '__main__': merge('../tmp/passing.xml', '../tmp/failing.xml').save('../tmp/merged.xml') -- Kurt Seifried -- Red Hat -- Product Security -- Cloud PGP A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 [ CONTENT OF TYPE application/pgp-signature SKIPPED ]
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ