python-virtualenv: security fix leaves behind orphaned temporary directories
Package: python-virtualenv
Version: 1.6-1
[Let's make this a proper bug report]
On Tue, 2011-12-20 at 20:18 +0000, Adam D. Barratt wrote:
> On Tue, 2011-12-20 at 09:44 +0100, Piotr Ożarowski wrote:
> > [Adam D. Barratt, 2011-12-19]
> > > Looking at the diff, and the equivalent code in the unstable package,
> > > there seems to be a missing component - namely, that the directory
> > > created via mkdtemp() is never cleaned up. Am I missing something, or
> > > does fixing this issue result in orphaned temporary directories?
> >
> > the old code didn't do it as well,
>
> Well, trying to remove /tmp would be a silly idea. ;-)
>
> > I can update the patch to remove it
>
> That would be good, although in that case the change should be made in
> unstable first (and pushed upstream?).
Regards,
Adam
Reply to: