Comment # 11 on bug 910500 from Johannes Segitz

(In reply to Neil F Brown from comment #10)
We probably will assign a CVE for that issue.

If you just need MD_UUID, why do you use this > $tmp, source approach? Your
changed version should be safe but I don't see the need for that.