[Pki-devel] [PATCH] Patch for /tmp/file vulnerabilities

3 Mar 2015

      Please review the attached patch which addresses the following:

  * Bugzilla Bug #1183176 - (CVE-2015-0234) CVE-2015-0234 pki-core 10.x:
    multiple /tmp/ file vulnerabilities
    <https://bugzilla.redhat.com/show_bug.cgi?id=1183176>
  * Bugzilla Bug #1183178 - CVE-2015-0234 pki-core: pki-core 10.x:
    multiple /tmp/ file vulnerabilities [fedora-all]
    <https://bugzilla.redhat.com/show_bug.cgi?id=1183178>

The attached patch was tested using the Dogtag 10.2.2 source code on the 'master' branch as of 02/27/2015.

It was successfully tested for a shared instance CA, KRA, OCSP, TKS, and TPS including successfully running the 'tpsclient' tool.

[Pki-devel] [PATCH] Patch for /tmp/file vulnerabilities

Matthew Harmsen