oss-sec mailing list archives

Re: CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129

From: Jan Rusnacko <jrusnack () redhat com>
Date: Tue, 28 Jul 2015 14:39:59 +0200

On 07/28/2015 11:44 AM, Reed Loden wrote:

* DL::Function#call could pass tainted arguments to a C function even if
$SAFE > 0.
https://github.com/ruby/ruby/commit/7269e3de3cee3bbb6ab77fc708f3a10cab00b65e

Could this be related to CVE-2013-2065 ?

https://www.ruby-lang.org/en/news/2013/05/14/taint-bypass-dl-fiddle-cve-2013-2065/
-- 
Jan Rusnacko, Red Hat Product Security

Current thread:

CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129 Reed Loden (Jul 28)
- Re: CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129 cve-assign (Jul 28)
  - Re: CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129 Reed Loden (Jul 29)
- Re: CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129 Jan Rusnacko (Jul 28)
  - Re: CVE request: Two ruby 'dl' vulnerabilities fixed in ruby-1.9.1-p129 Reed Loden (Jul 29)