Recently, Trustix Secure Linux discovered a vulnerability in the
openssl package. The auxiliary script “der_chop” created temporary
files in an insecure way, which could allow a symlink attack to create
or overwrite arbitrary files with the privileges of the user invoking
the program.