[tryton-debian] Bug#749073: python-suds: does not delete directories in /tmp, causing DoS

[Ondrej Zary]

Package: python-suds
Version: 0.3.9-1+deb6u1
Severity: serious
Justification: breaks unrelated software


The deb6u1 update to python-suds fixed insecure temporary directory
creation (/tmp/suds) by creating directories with random names in /tmp.

However, these directories are never deleted, causing /tmp to reach
subdirectory limit (~32000 on ext3), breaking various other programs that want
to create a temporary directory in /tmp (they get "Too many links" error).

-- System Information:
Debian Release: 6.0.9
  APT prefers oldstable-updates
  APT policy: (500, 'oldstable-updates'), (500, 'oldstable')
Architecture: amd64 (x86_64)

Kernel: Linux 2.6.32-5-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages python-suds depends on:
ii  python                  2.6.6-3+squeeze7 interactive high-level object-orie
ii  python-pkg-resources    0.6.14-4         Package Discovery and Resource Acc
ii  python-support          1.0.10           automated rebuilding support for P

python-suds recommends no packages.

python-suds suggests no packages.

-- no debconf information