News for hackers. Stuff that matters.
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by labster on Monday May 30, 2016 @12:05AM (#11799485)
If you're not using two-argument open() in Perl 5, you deserve what you get.
Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by bigiain on Monday May 30, 2016 @06:30PM (#11803589)
"If you're not using two-argument open() in Perl 5, you deserve what you get."

Pretty sure that's not quite what you meant to say...

http://modernperlbooks.com/mt/2010/04/three-arg-open-migrati...

If you _are_ using two-arg open, or if you're _not_ using three-arg open.

(Or, the more general case: "If you're using Perl you deserve what you get - if you don't understand all the language features you're using." (And feel free to substitute whatever language will start the argument in place of Perl in that claim...)

Re:GraphicsMagick and ImageMagick popen() shell vulnerabilit... by sebcat on Monday May 30, 2016 @01:30AM (#11799724)
If you're not using fork, dup2, execve instead of popen, you deserve what you get.