David Holland

The issue arises from the insecure use of mktemp() in caml-light, along with unsafe operations performed in the /tmp directory during the make install process.

The issue concerns the creation of insecure temporary files in a publicly-writable area, specifically /tmp, due to the use of the tempnam() function.