CVE-2011-3871: Puppet uses predictable filenames, allowing arbitrary file overwrite

The GitHub patch shows the vulnerable code was replaced in lib/puppet/application/resource.rb, where the temporary file creation logic resided. The original code used a static /tmp path with the process ID (predictable), while the patched version switched to Tempfile.new with a secure random name. The CVE description explicitly ties the vulnerability to the --edit mode's predictable filename, which matches the code changes observed in the commit diff. No other functions are implicated in the advisory or patch details.