PT-2025-55202 · Hackage · Crypton-X509-Store+1

Publicado 2025-11-17 · Atualizado 2025-11-17

OSV

Private key leak via inherited file descriptor

The X.509 key reading function readKeyFile opened a file descriptor to the private key without setting the close-on-exec flag. If a child process is execed at the same time, it would inherit that file descriptor and could read the private key material.

Impact is limited to child processes that run untrusted code, but that do not close inherited file descriptors. (For example, the su(1) command.)

This leak was fixed by setting the close-on-exec flag on unix-based systems.

Identificadores relacionados

HSEC-2025-0006

Produtos afetados

Crypton-X509-Store

X509-Store

Referências · 4

• https://github.com/haskell/security-advisories · Nota
• https://github.com/kazu-yamamoto/crypton-certificate/commit/e353d450c381c9d6b903c4257927e0c89c97acb1 · Nota
• https://osv.dev/vulnerability/HSEC-2025-0006 · Aviso do Fabricante
• https://raw.githubusercontent.com/haskell/security-advisories/refs/heads/generated/osv-export · Nota