Skip to content

Static tempory directory name in public temporary directory

Migrated from: https://bugs.launchpad.net/inkscape/+bug/1812862

Steps to reproduce:

  • open Inkscape
  • Import Clip Art (File > Import Clip Art)

What happened?

inkscape creates the following tree of directories with fixed names /home/dkg/tmp/openclipart/images

What should have happened?

The directory should be a different and random name each time, so as to not allow an attacker to interfere with the directory ownership.

Inkscape Version and Operating System:

  • Inkscape Version: Inkscape 1.0 Alpha
  • Operating System: Ubuntu
  • Operating System version: 18.04
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information