libspatialindexnavel.so calls mktemp

Use this forum for all posts and questions about the free QCAD Community Edition version 3

Moderator: andrew

Post Reply
sagitter
Active Member
Posts: 25
Joined: Mon Dec 05, 2016 12:31 pm

libspatialindexnavel.so calls mktemp

Post by sagitter » Thu Dec 08, 2022 11:04 pm

Hi all.

QCAD's libspatialindexnavel.so library calls mktemp

Code: Select all

$ readelf -a /usr/lib64/qcad/libspatialindexnavel.so | grep temp
000000078c90  006600000007 R_X86_64_JUMP_SLO 0000000000000000 mktemp@GLIBC_2.2.5 + 0
This is a security issue according to the RPM packaging giudelines in Fedora; do you consider it as a vulnerability too?

Post Reply

Return to “QCAD Community Edition”