Steve Kemp discovered the rltropen() function in readline, a set of libraries to handle command lines, insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks. As noted in the CVE request, rltropen() is typically only called during debugging.

CVE request: http://seclists.org/oss-sec/2014/q1/579

Steve Kemp discovered the rltropen() function in readline, a set of libraries to handle command lines, insecurely handled a temporary file. This could allow a local attacker to perform symbolic link attacks. As noted in the CVE request, rltropen() is typically only called during debugging.

CVE request: http://seclists.org/oss-sec/2014/q1/579