Bug #68791 [Opn->Ana]: Insecure temp file creation

Edit report at https://bugs.php.net/bug.php?id=68791&edit=1 ID: 68791 Updated by: cmb@php.net Reported by: bugreports at internot dot info Summary: Insecure temp file creation -Status: Open +Status: Analyzed Type: Bug Package: Zip Related Operating System: Linux Ubuntu 14.04 PHP Version: master-Git-2015-01-10 (Git) Block user comment: N Private report: N New Comment: Actually, this is a libzip issue that has been fixed as of libzip 1.0 (at least)[1], and PHP 7 already has at least libzip 1.0.1. PHP 5.6, however, still ships with libzip 0.11.2, so the fix needs to be backported. The respective mkstemp() call is in zip_close.c[2]. [1] <http://hg.nih.at/libzip/rev/d3ac0a768127> [2] <https://github.com/php/php-src/blob/PHP-5.6.26/ext/zip/lib/zip_close.c#L613> Previous Comments: ------------------------------------------------------------------------ [2015-01-10 17:17:40] bugreports at internot dot info Description: ------------ Hi, In /ext/zip/lib/zip_close.c: 613 if ((tfd=mkstemp(temp)) == -1) { mkstemp is called, but the umask is not securely set first. ------------------------------------------------------------------------ -- Edit this bug report at https://bugs.php.net/bug.php?id=68791&edit=1