[#9722] Kernel#system broken inside Dir.chdir(&block) if system command doesn't have shell characters — <noreply@...>

Bugs item #7278, was opened at 2006-12-14 13:59

8 messages 2006/12/14

[#9749] System V IPC in standard library? — Steven Jenkins <steven.jenkins@...>

Back in August, I needed a semaphore to serialize access to an external

14 messages 2006/12/19

[#9753] CVS freeze — SASADA Koichi <ko1@...>

Hi,

20 messages 2006/12/20
[#9755] Re: [ruby-dev:30039] CVS freeze — SASADA Koichi <ko1@...> 2006/12/20

Hi,

[#9757] Re: [ruby-dev:30040] Re: CVS freeze — SASADA Koichi <ko1@...> 2006/12/20

Hi,

Re: another unpatched CGI vulnerability from 2004?

From: Yukihiro Matsumoto <matz@...>
Date: 2006-12-11 23:45:51 UTC
List: ruby-core #9703
Hi,

In message "Re: another unpatched CGI vulnerability from 2004?"
    on Tue, 12 Dec 2006 05:25:43 +0900, murphy <murphy@rubychan.de> writes:

|I came upon this:
|
|http://secunia.com/advisories/12290/
|
|has this been fixed yet? I'm not sure...

It's fixed way back in 1.8.1.

							matz.

Thu Jul 22 16:41:54 2004  Yukihiro Matsumoto  <matz@ruby-lang.org>

	* lib/cgi/session.rb (CGI::Session::FileStore#update): sets the
	  permission of the session data file to 0600.

	* lib/cgi/session/pstore.rb (CGI::Session::Pstore#initialize):
	  ditto.

In This Thread