Michael Scherer of Red Hat reported multiple issues in OpenStack Trove where temporary files are used in an insecure way in different modules:

trove: MongoDB datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/mongodb/service.py#L176

trove: PostgreSQL datastore module in guestagent insecure /tmp file usage in resetconfiguration() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/postgresql/service/config.py#L70

trove: Redis datastore module in guestagent insecure /tmp file usage in writeconfig() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/redis/service.py#L236

trove: MySQL datastore module in guestagent insecure /tmp file usage in writemycnf() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/mysql/service.py#L790

trove: MySQL restore strategy in guestagent insecure /tmp file usage in InnoBackupEx::runprepare() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/restore/mysqlimpl.py#L194

trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupEx::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L55

trove: MySQL backup strategy in guestagent insecure /tmp file usage in MySQLDump::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L36

trove: MySQL backup strategy in guestagent insecure /tmp file usage in InnoBackupExIncremental::cmd() https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/mysqlimpl.py#L110

trove: Cassandra datastore module insecure /tmp file usage in getactualdbstatus() https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/system.py#L33 https://github.com/openstack/trove/blob/master/trove/guestagent/datastore/experimental/cassandra/service.py#L230

trove: Couchbase backup strategy insecure /tmp file usage in multiple class CbBackup methods https://github.com/openstack/trove/blob/master/trove/guestagent/strategies/backup/experimental/couchbaseimpl.py#L30