[ruby-core:84347] [Ruby trunk Bug#14205] Unsanitizied filename leads to command injection in 'resolv'

From: jazzy171120@...
Date: 2017-12-19 10:07:03 UTC
List: ruby-core #84347
Issue #14205 has been reported by drigg3r (Jasraj Bedi).

----------------------------------------
Bug #14205: Unsanitizied filename leads to command injection in 'resolv'
https://bugs.ruby-lang.org/issues/14205

* Author: drigg3r (Jasraj Bedi)
* Status: Open
* Priority: Normal
* Assignee: 
* Target version: 
* ruby -v: 
* Backport: 2.3: UNKNOWN, 2.4: UNKNOWN
----------------------------------------
Here is the pull request
https://github.com/ruby/ruby/pull/1777



-- 
https://bugs.ruby-lang.org/

Unsubscribe: <mailto:[email protected]?subject=unsubscribe>
<http://lists.ruby-lang.org/cgi-bin/mailman/options/ruby-core>

In This Thread

Prev Next