oss-sec mailing list archives

Re: Features 0.3.0 Ruby gem /tmp file injection vulnerability

From: "Larry W. Cashdollar" <larry0 () me com>
Date: Tue, 10 Sep 2013 17:17:52 -0400


On Sep 10, 2013, at 4:52 PM, Henri Salo <henri () nerv fi> wrote:

On Mon, Sep 09, 2013 at 05:38:46PM +0000, Larry W. Cashdollar wrote:

Vendor: Not notified


Why not?


I dropped the ball.  Done.  I just sent him an email.

=)

Features 0.3.0 Ruby gem /tmp file injection vulnerability Larry W. Cashdollar (Sep 09)
- Re: Features 0.3.0 Ruby gem /tmp file injection vulnerability Kurt Seifried (Sep 09)
- Re: Features 0.3.0 Ruby gem /tmp file injection vulnerability Henri Salo (Sep 10)
- <Possible follow-ups>
- Re: Features 0.3.0 Ruby gem /tmp file injection vulnerability Larry W. Cashdollar (Sep 10)